Add Gitea CI, fix size overflow and helper-path inconsistency from review2.md

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

scripts/check-docs.sh

@@ -4,7 +4,7 @@
 set -u
 cd "$(dirname "$0")/.."
 
-DOCS=(README.md SPEC.md COMPARISON.md AGENTS.md CHANGELOG.md docs/ARCHITECTURE.md docs/RESEARCH.md)
+DOCS=(README.md SPEC.md COMPARISON.md AGENTS.md CHANGELOG.md docs/ARCHITECTURE.md docs/RESEARCH.md docs/CI.md)
 bad=0
 fail() { echo "docs: $*"; bad=$((bad+1)); }
 
@@ -12,11 +12,11 @@ fail() { echo "docs: $*"; bad=$((bad+1)); }
 while IFS= read -r f; do
   f=${f#./}
   printf '%s\n' "${DOCS[@]}" | grep -qxF "$f" || fail "$f is not in the DOCS list of scripts/check-docs.sh"
-done < <(find . -name '*.md' -not -path './build/*' -not -path './.git/*' -not -path './prompt.md' -not -path './audit/*' -not -path './review.md' -not -path './valgrind/*')
+done < <(find . -name '*.md' -not -path './build/*' -not -path './.git/*' -not -path './prompt.md' -not -path './audit/*' -not -path './review.md' -not -path './review2.md' -not -path './valgrind/*')
 # prompt.md: the original task statement, not documentation.
 # audit/*, valgrind/*: separate, self-contained doc sets (one README per CVE check, one for the
 # valgrind setup); linked from the main docs but not forced into their full cross-link mesh.
-# review.md: a standalone external security review, not part of the maintained doc set.
+# review.md, review2.md: standalone one-off reviews, not part of the maintained doc set.
 
 for f in "${DOCS[@]}"; do
   [ -f "$f" ] || { fail "$f is missing"; continue; }