Backport: Make security-check informational only (#36681)

[Copilot]

Backport of #36681 to release/v1.25.

security-check (govulncheck) was failing CI on all PRs whenever vulnerabilities existed in dependencies. Since https://github.com/go-gitea/gitea/security/dependabot already surfaces this information, the check should be informational only.

• Makefile: Append || true to the security-check target so govulncheck output is preserved but non-zero exits no longer break CI.

Note: release/v1.25 does not have the GOEXPERIMENT= prefix on this line (added later in main), so only || true was appended.

Original prompt

Create a backport pull request targeting release/v1.25 that applies the changes from merged PR #36681 ("Make security-check informational only") in go-gitea/gitea.

Context:

• Original PR: Make security-check informational only #36681 (merged)
• Target branch for backport: release/v1.25

Requirements:

1. Identify the exact commits and file changes introduced by PR Make security-check informational only #36681.
2. Cherry-pick or re-apply those changes onto a new branch off release/v1.25.
3. Resolve any merge conflicts cleanly and keep behavior identical to PR Make security-check informational only #36681, adapted only as necessary for compatibility with 1.25.
4. Ensure existing CI checks pass (or document any expected differences).
5. Open a PR against release/v1.25 with a clear title like: "Backport: Make security-check informational only".
6. In the PR description:
   • Reference the original PR Make security-check informational only #36681.
   • Summarize what changed and why.
   • Note any conflicts or adjustments made for the backport.

Notes:

• The change is expected to affect the security-check workflow/job to be informational-only (i.e., not failing the overall workflow / not blocking merges).
• Follow repository conventions for backports (labels, branch naming, and PR template usage if present).

This pull request was created from Copilot chat.

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.