Fix release publishing and add a CI token fallback

Tag builds since v0.2.2 built all artifacts but never published a release:
- tools/publish_release.sh only assembled AUTH in the GITEA_TOKEN branch; the
  ~/.git-credentials branch set CRED and then used an unbound ${AUTH[@]} under
  `set -u`, so every API call failed and the job ended "could not create or find
  release". It now sets AUTH=(-u "$CRED").
- The repo has no GITEA_TOKEN secret and the runner has no git credentials, so the
  workflow now falls back to the built-in workflow token:
  GITEA_TOKEN: ${{ secrets.GITEA_TOKEN || github.token }}.

v0.2.9 was then built and published locally with all five artifacts (portable
Linux/Windows/macOS, NSIS installer, AppImage) and the release page verified via
the API. v0.2.4-v0.2.8 remain unpublished; they are superseded by the latest.

Docs
- docs/RELEASING.md records the incident and the local-publish fallback.
- TODO gains a release-pipeline follow-up (verify CI on the next tag).
- MEMORY notes the root cause, the missing secret, and which releases exist.
- Version 0.2.10.

DONE.md

@@ -319,7 +319,7 @@ Completed in the working tree (uncommitted with the control pass). Headless **74
       to the entrance.
 - [x] Wand shortcut is `C`, not `W`. Tests: `src/test/tests/test_access_loadout.gd`.
 
-## Player control, focus ring, and radial action menu
+## Player control, focus circle, and radial action menu
 
 Completed 2026-10-31 with ADR-0007–0010. Headless **77/77**, plus a windowed smoke
 (`src/test/smoke_focus_radial.gd`) that opens the wheel and saves screenshots.
@@ -334,13 +334,13 @@ Completed 2026-10-31 with ADR-0007–0010. Headless **77/77**, plus a windowed s
 - [x] `cancel` (Esc / RMB) closes the top modal first; with nothing open, Esc toggles mouse
       capture and RMB does nothing.
 
-### Focus and head ring
+### Focus and focus circle
 
 - [x] Focus cone in `src/game/npc_focus.gd` (~10 m, ~10°). Closest-to-forward wins; occlusion
       ray skips building hits. `Tab` still cycles 12 m.
 - [x] 8-frame miss grace so walk-bob does not drop focus.
-- [x] Billboarded torus on `Rig/Head`; gold idle, brighter while the radial is open; `Label3D`
-      `display_name`. HUD target line uses the display name, not the node name.
+- [x] Billboarded blue circle in front of the face on `Rig/Head`; brighter while the radial is
+      open; `Label3D` `display_name`. HUD target line uses the display name, not the node name.
 - [x] Screen-center crosshair.
 
 ### Radial HUD
@@ -364,7 +364,7 @@ Completed 2026-10-31 with ADR-0007–0010. Headless **77/77**, plus a windowed s
 
 - [x] Named input map: `action_menu` (Space/LMB), `confirm` (Space/Enter), `cancel`
       (Esc/RMB), `inspect` (E), `wand` (C). `GameManager` uses `is_action_pressed`.
-- [x] Windowed smoke: focus ring + name, wheel open/step/confirm/cancel
+- [x] Windowed smoke: focus circle + name, wheel open/step/confirm/cancel
       (`src/test/smoke_focus_radial.gd`, exits non-zero on failure).
 - [x] README controls table, smoke checklist, test count, implemented/not-yet lists.
 
@@ -405,7 +405,6 @@ screenshots.
 
 Completed 2026-10-31 (working tree). Headless **88/88**; `src/test/smoke_session_shell.gd` and the windowed focus/radial smoke both pass.
 
-
 - [x] The skyline backdrop was removed: `assets/textures/ai/game_ready/skyline.png` has an
       opaque black background, so the planes rendered as black slabs with window dots. Re-add
       the backdrop only with a transparent asset or a keyed shader.
@@ -414,7 +413,7 @@ Completed 2026-10-31 (working tree). Headless **88/88**; `src/test/smoke_session
 - [x] Steps and the landing are visual-only (no collider). The guard walks through them; add
       simple step colliders or restage the landing so it does not intersect the walk path.
 - [x] Marquee text (`STEP LINE`) is tiny from the sidewalk. Scale the Label3D up.
-- [x] Focus ring and name tag are small at 2–3 m. Consider a larger torus / font after a
+- [x] Focus circle and name tag are small at 2–3 m. Consider a larger circle / font after a
       real playtest.
 - [x] NPC crowd cap (`MAX_LIVE_NPCS`) silently drops routine traffic at 16. Add a short
       despawn/lifetime for ordinary guests so the entrance does not fill up with standers.
@@ -423,7 +422,6 @@ Completed 2026-10-31 (working tree). Headless **88/88**; `src/test/smoke_session
 
 Completed 2026-10-31 (working tree). Headless **88/88**; `src/test/smoke_session_shell.gd` and the windowed focus/radial smoke both pass.
 
-
 The game boots into a live 900 s shift. `Save` declares `settings.json` and never uses it.
 `V` cycles venues by restarting the shift.
 
@@ -439,7 +437,6 @@ The game boots into a live 900 s shift. `Save` declares `settings.json` and neve
 
 Completed 2026-10-31 (working tree).
 
-
 - [x] README controls table, smoke checklist, test count, and implemented/not-yet lists
       refreshed for the control pass (77 tests).
 - [x] `PLAN.md` Tech Stack / Planned Commands still say GUT and GitHub Actions; the project
@@ -450,7 +447,6 @@ Completed 2026-10-31 (working tree).
 
 Completed 2026-10-31 (working tree). Headless **98/98**; `src/test/smoke_plan_verbs.gd` exercises all five verbs.
 
-
 - [x] Eye contact as a Level 1 action (PLAN / glossary). Distinct from raise-hand. Add a
       radial slice if it ships.
 - [x] "I recognize this person" is a player decision recorded as evidence, not a pre-attached
@@ -466,7 +462,6 @@ Completed 2026-10-31 (working tree). Headless **98/98**; `src/test/smoke_plan_ve
 
 Completed 2026-10-31 (working tree). Headless **105/105**; `src/test/smoke_crowd.gd` verifies rubbernecking and panic clearing. A 16-NPC entrance measured ~1.2 ms/frame (824 fps, vsync off), so no LOD/culling was added at the current cap.
 
-
 `CrowdSystem` is a mood/attention float. PLAN wants people watching, gathering, and panicking.
 
 - [x] On `aggressive_behavior` / `emergency_responder`, nearby idle NPCs stop and face the
@@ -478,7 +473,6 @@ Completed 2026-10-31 (working tree). Headless **105/105**; `src/test/smoke_crowd
 
 Completed 2026-10-31 (working tree). Headless **113/113**; `src/test/smoke_emergency.gd` covers the unjustified-call investigation, the evacuation aftermath, and the review copy.
 
-
 Responder outcomes (`command` / `restraint` / `evacuation` / `arrest`) are log lines. PLAN also
 wants evacuation, a closed street, and an investigation when the call was unjustified.
 
@@ -491,7 +485,6 @@ wants evacuation, a closed street, and an investigation when the call was unjust
 
 Completed 2026-10-31 (working tree). Headless **120/120**; `src/test/smoke_timeline.gd` opens the timeline from the review, steps through every event, and returns to the review.
 
-
 - [x] Shift review: a timeline of recorded incident events (ADR-0005 already stores them).
       Scrub or step through; no live 3D replay required in the first version.
 
@@ -499,7 +492,6 @@ Completed 2026-10-31 (working tree). Headless **120/120**; `src/test/smoke_timel
 
 Completed 2026-10-31 (working tree). Headless **127/127**; verified visually with a staged sit/photo/perform lineup.
 
-
 Intents `sit` / `photo` / `film` / `perform` already pick waypoints. ADR-0010 rig (face/hair)
 is in the working tree. Bodies still idle-stand at those spots.
 
@@ -510,7 +502,6 @@ is in the working tree. Bodies still idle-stand at those spots.
 
 Completed 2026-10-31 (working tree). Headless **134/134**; `src/test/smoke_audio.gd` checks the bed follows mood and the radio crackles, headless and windowed (real audio server).
 
-
 `AudioFeedback` is sine beeps. DONE called that "crowd ambience"; it is not.
 
 - [x] Loop a low crowd bed that rises with `CrowdSystem.mood`.
@@ -521,6 +512,5 @@ Completed 2026-10-31 (working tree). Headless **134/134**; `src/test/smoke_audio
 
 Completed 2026-10-31 (working tree). Headless **139/139**; verified visually at 1.4x font scale with the shape meter showing.
 
-
 - [x] Escalation colors that still read in grayscale (shape or label, not hue alone).
 - [x] HUD font scale in settings.