fix(ci): fix known_hosts resolution in git_write script

ci/scripts/git_write.py

@@ -15,13 +15,29 @@ def main():
     if not re.fullmatch(r'deytenit/[A-Za-z0-9_.-]+',repository):
         raise ValueError('Unexpected repository owner')
     with tempfile.TemporaryDirectory(prefix='gitea-write-key-') as directory:
-        key=Path(directory)/'key';key.write_text(os.environ['GIT_WRITE_KEY']);key.chmod(0o600)
-        known=Path(__file__).resolve().parent.parent/'.gitea'/'known_hosts'
-        if not known.exists():
-            known=Path(__file__).resolve().parent.parent/'known_hosts'
-        env=dict(os.environ);env.pop('GIT_WRITE_KEY',None)
-        env['GIT_SSH_COMMAND']=shlex.join(['ssh','-T','-i',str(key),'-o','IdentitiesOnly=yes','-o','StrictHostKeyChecking=yes','-o','HostKeyAlgorithms=ssh-ed25519','-o','UserKnownHostsFile='+str(known)])
-        subprocess.run(['git','push','ssh://git@git.ermnvldmr.com:22222/'+repository+'.git',ref],env=env,check=True)
+        key = Path(directory) / 'key'
+        key.write_text(os.environ['GIT_WRITE_KEY'])
+        key.chmod(0o600)
+        repo_root = Path(__file__).resolve().parents[2]
+        candidates = [
+            repo_root / '.gitea' / 'known_hosts',
+            repo_root / 'ci' / 'known_hosts',
+            Path(__file__).resolve().parent.parent / '.gitea' / 'known_hosts',
+            Path(__file__).resolve().parent.parent / 'known_hosts',
+        ]
+        known = next((c for c in candidates if c.exists()), None)
+        if not known:
+            raise FileNotFoundError(f'Could not find known_hosts in {[str(c) for c in candidates]}')
+        env = dict(os.environ)
+        env.pop('GIT_WRITE_KEY', None)
+        env['GIT_SSH_COMMAND'] = shlex.join([
+            'ssh', '-T', '-i', str(key),
+            '-o', 'IdentitiesOnly=yes',
+            '-o', 'StrictHostKeyChecking=yes',
+            '-o', 'HostKeyAlgorithms=ssh-ed25519',
+            '-o', f'UserKnownHostsFile={known}',
+        ])
+        subprocess.run(['git', 'push', f'ssh://git@git.ermnvldmr.com:22222/{repository}.git', ref], env=env, check=True)
 
 
 if __name__=='__main__':main()