GHSA-rh79-75qm-gwjr: Gitea LFS Deploy-Key Privilege Escalation

Gitea has a privilege escalation vulnerability in its LFS (Large File Storage, a Git extension for handling large files) server where deploy keys (limited-access credentials for CI/CD systems) can be used to impersonate the repository owner. The bug occurs because when authenticating via deploy key, the system sets the user ID in the JWT (a signed token used to verify identity) to the repository owner's ID instead of a unique deploy key identifier, allowing an attacker with a write deploy key to access LFS objects from any private repository owned by the victim.