Route realcombo git subprocesses through the trusted base in CI

Why: on keyless runners the RDM cache clone and pins materialization
inside svc.sh fetched nested pins over raw SSH URLs (run 2608: host key
verification failed); the suite now injects the same URL-scoped token
header and insteadOf rewrite via environment when SVC_CI_GIT_* is set.
Evidence: local rerun stays green (env unset locally); CI run applies it.
Impact: tests + ci.yaml only; token travels via environment only.

.gitea/workflows/ci.yaml

@@ -616,6 +616,8 @@ jobs:
           unset SUBMODULE_TOKEN
           make -C rdm build
       - name: Run real-combination lifecycle gates (SQLite, U3, required)
+        env:
+          SUBMODULE_TOKEN: ${{ secrets.SUBMODULE_TOKEN }}
         run: |
           set -euo pipefail
           # 路径变量在脚本内解析（YAML env: 不做 shell 展开）。
@@ -623,4 +625,7 @@ jobs:
           export SVC_REAL_BIN="$PWD/bin/agent-system"
           export SVC_REAL_RDM_BIN="$PWD/rdm/bin/agent-system-rdm"
           export SVC_RDM_ORIGIN="$PWD/rdm"
+          # CI 无 SSH key：把受信基址与 URL 级 token 头经环境交给套件（仅环境传递）。
+          export SVC_CI_GIT_SERVER="${GITHUB_SERVER_URL%/}"
+          export SVC_CI_GIT_TOKEN="${SUBMODULE_TOKEN}"
           python3 -m unittest tests.test_svc_realcombo -v