ci: switch SDK to git dep, inject MODULE_SDK_PAT via insteadOf

Two prior approaches failed:

1. Sibling-clone of module-sdk into a directory two levels up
   from $GITHUB_WORKSPACE failed with a 2-second runner failure
   (bisect confirmed: workflow with ONLY the own-repo checkout
   succeeded; adding the sibling-clone step reproduced the
   failure).

2. Anonymous clone of the now-public module-sdk also failed —
   the Forgejo instance has REQUIRE_SIGNIN_VIEW=true, so making
   a repo public does not enable anonymous read.

The working approach: switch fai-module-sdk to a git dependency
in Cargo.toml and inject a stored Forgejo PAT into any outgoing
git.flemming.ws URL via 'git config url.X.insteadOf Y'. Cargo's
git fetch (driven by CARGO_NET_GIT_FETCH_WITH_CLI=true) then
authenticates transparently.

The Forgejo Actions secret MODULE_SDK_PAT carries the read token.
Locally, the same insteadOf trick works via GIT_CONFIG_COUNT
without polluting the global git config.

Bumps text-extract 0.1.4 -> 0.1.5.

Signed-off-by: flemming-it <sf@flemming.it>

Cargo.lock

@@ -170,6 +170,7 @@ dependencies = [
 [[package]]
 name = "fai-module-sdk"
 version = "0.1.2"
+source = "git+https://git.flemming.ws/fai/module-sdk.git?branch=main#f209fbc86f531b53e576f3cdbdf75750eef3b07a"
 dependencies = [
  "fai-module-sdk-macros",
  "serde",
@@ -181,6 +182,7 @@ dependencies = [
 [[package]]
 name = "fai-module-sdk-macros"
 version = "0.1.2"
+source = "git+https://git.flemming.ws/fai/module-sdk.git?branch=main#f209fbc86f531b53e576f3cdbdf75750eef3b07a"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -504,7 +506,7 @@ dependencies = [
 
 [[package]]
 name = "text_extract"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "fai-module-sdk",
  "pdf-extract",