fix: use jsign 7.1 for Azure Trusted Signing

jsign 6.0 lacks the TRUSTEDSIGNING keystore type (only AZUREKEYVAULT); Azure Trusted
Signing support requires jsign >= 7.0. 7.1 matches /usr/share/jsign on the build host.
Fixes the release sign-and-publish step.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.gitea/workflows/release.yml

@@ -407,7 +407,9 @@ jobs:
           set -euo pipefail
           sudo apt-get update
           sudo apt-get install -y default-jre-headless
-          JSIGN_VERSION="6.0"
+          # jsign >= 7.0 is required for the TRUSTEDSIGNING (Azure Trusted Signing) storetype;
+          # 6.0 only supports AZUREKEYVAULT. 7.1 matches the version on the build host.
+          JSIGN_VERSION="7.1"
           curl -fsSL "https://github.com/ebourg/jsign/releases/download/${JSIGN_VERSION}/jsign-${JSIGN_VERSION}.jar" \
             -o /tmp/jsign.jar
           echo "[OK] Installed JRE and jsign ${JSIGN_VERSION}"