Add NVD API key to OWASP Dependency-Check via secret

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -125,6 +125,7 @@ jobs:
             --scan package.json
             --out .
             --disableAssembly
+            --nvdApiKey ${{ secrets.NVD_API_KEY }}
         continue-on-error: true
 
       - name: Rename Dependency-Check reports