new git integraton code

Modules/Helpdesk/changelog.yaml

@@ -480,3 +480,14 @@
     - Reset the optional local Gitea Authorization config inside the prefixed-signature regression test so prior authorization tests cannot leak state into it.
     - Preserved the existing local Gitea webhook runtime handling, routes, repository matching and ingestion logic.
     - Preserved append-only changelog history.
+
+- version: 1.10.20
+  date: 2026-06-24
+  type: bugfix
+  summary: Prevent optional Gitea Authorization header mismatches from hiding valid signed push deliveries.
+  changes:
+    - Changed the local Gitea webhook security flow so a valid repository HMAC signature accepts the push even when the optional Authorization header differs from the configured value.
+    - Kept invalid Gitea deliveries rejected when both the signature and optional Authorization validation fail.
+    - Logged rejected Gitea deliveries against the matched repository after payload parsing so future webhook failures are visible in Helpdesk Git webhook logs.
+    - Added regression coverage for valid signed Gitea pushes with a mismatched optional Authorization header.
+    - Preserved append-only changelog history.