feat: add deploy tokens (#37306)

Deploy keys only work over SSH. A deploy token is their counterpart for HTTPS: a repository scoped credential, used as the password of a Git request, with read or read and write access. It covers Git operations and LFS, and can be regenerated in place.

Signed-off-by: silverwind <me@silverwind.io>
Co-authored-by: Claude Mythos <noreply@anthropic.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: bircni <bircni@icloud.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

models/user/user_list.go

@@ -31,18 +31,15 @@ func GetUsersMapByIDs(ctx context.Context, userIDs []int64) (map[int64]*User, er
 }
 
 func GetPossibleUserFromMap(userID int64, usererMaps map[int64]*User) *User {
-	switch userID {
-	case GhostUserID:
-		return NewGhostUser()
-	case ActionsUserID:
-		return NewActionsUser()
-	case 0:
+	if userID == 0 {
 		return nil
-	default:
-		user, ok := usererMaps[userID]
-		if !ok {
-			return NewGhostUser()
-		}
-		return user
 	}
+	if newFunc, ok := globalVars().systemUserNewFuncs[userID]; ok {
+		return newFunc()
+	}
+	user, ok := usererMaps[userID]
+	if !ok {
+		return NewGhostUser()
+	}
+	return user
 }