Authenticated metadata disclosure via organization-wide Actions queries

Incorrect authorization in Gitea 1.26.4 and earlier allows remote authenticated users to read private repository Actions metadata. The organization-level run and job handlers pass only the organization ID to shared queries, which join repositories by owner without applying per-repository access or team-permission checks. Any organization member with an organization-scoped token can enumerate workflow filenames, branches, commit messages, commit hashes, contributor identities, and activity timing across private repositories that the account cannot otherwise access.