Core Rule Set: the API searches gitea and Forgejo share pass (closes #353)

Recorded with python3, powershell, ls -la, .htaccess, file names and plain
words from gitea 1.27.3 and Forgejo 17.0.1. q on the API's searches of
topics, of an organisation's teams and of emails joins 900603, which skips
930120, 932120, 932250 and 932260. The same four rules are skipped by
query on the search of unadopted repositories (900607) and by name on the
search of a repository's milestones (900608). 900605 also lets /bin/sh
through in q on the API's search of packages, since a package name can
hold a slash. The searches of repositories, users and issues already
passed.

Model: opus-5-5

internal/coreruleset/testdata/gitea-requests.txt

@@ -381,6 +381,67 @@
 /org/acme/pulls/developers?type=your_repositories&sort=recentupdate&state=open&q=SELECT%20%2A%20FROM%20users%20WHERE&search_mode=exact
 /alice/tools/milestone/1?q=SELECT%20%2A%20FROM%20users%20WHERE
 
+# The API's searches that gitea and Forgejo share, sent with curl to gitea
+# 1.27.3. Each searches for words that name commands and files, such as python3
+# and .htaccess, and for plain words. A package name can hold a slash, as npm's
+# @alice/tools-cli does, so the search of packages is also sent /bin/sh. The
+# search of unadopted repositories takes an owner and a name.
+/api/v1/repos/search?q=python3&limit=10
+/api/v1/repos/search?q=powershell&limit=10
+/api/v1/repos/search?q=ls%20-la&limit=10
+/api/v1/repos/search?q=.htaccess&limit=10
+/api/v1/repos/search?q=docker-compose.yml&limit=10
+/api/v1/repos/search?q=tools&limit=10
+/api/v1/users/search?q=python3
+/api/v1/users/search?q=powershell
+/api/v1/users/search?q=ls%20-la
+/api/v1/users/search?q=.htaccess
+/api/v1/users/search?q=bob
+/api/v1/repos/issues/search?q=python3&type=issues&state=open
+/api/v1/repos/issues/search?q=powershell&type=issues&state=open
+/api/v1/repos/issues/search?q=ls%20-la&type=issues&state=open
+/api/v1/repos/issues/search?q=.htaccess&type=issues&state=open
+/api/v1/repos/issues/search?q=docker-compose.yml&type=issues&state=open
+/api/v1/repos/issues/search?q=build&type=issues&state=open
+/api/v1/repos/alice/tools/issues?state=open&q=python3
+/api/v1/repos/alice/tools/issues?state=open&q=powershell
+/api/v1/repos/alice/tools/issues?state=open&q=ls%20-la
+/api/v1/repos/alice/tools/issues?state=open&q=.htaccess
+/api/v1/repos/alice/tools/issues?state=open&q=docker-compose.yml
+/api/v1/packages/alice?q=python3
+/api/v1/packages/alice?q=powershell
+/api/v1/packages/alice?q=ls%20-la
+/api/v1/packages/alice?q=.htaccess
+/api/v1/packages/alice?q=%2Fbin%2Fsh
+/api/v1/packages/alice?q=install-script
+/api/v1/packages/alice?q=%40alice%2Ftools-cli
+/api/v1/topics/search?q=python3
+/api/v1/topics/search?q=powershell
+/api/v1/topics/search?q=ls%20-la
+/api/v1/topics/search?q=.htaccess
+/api/v1/topics/search?q=docker
+/api/v1/orgs/acme/teams/search?q=python3
+/api/v1/orgs/acme/teams/search?q=powershell
+/api/v1/orgs/acme/teams/search?q=ls%20-la
+/api/v1/orgs/acme/teams/search?q=.htaccess
+/api/v1/orgs/acme/teams/search?q=developers
+/api/v1/admin/emails/search?q=python3
+/api/v1/admin/emails/search?q=powershell
+/api/v1/admin/emails/search?q=ls%20-la
+/api/v1/admin/emails/search?q=.htaccess
+/api/v1/admin/emails/search?q=alice
+/api/v1/admin/unadopted?query=python3
+/api/v1/admin/unadopted?query=powershell
+/api/v1/admin/unadopted?query=ls%20-la
+/api/v1/admin/unadopted?query=.htaccess
+/api/v1/admin/unadopted?query=alice%2Fpython3-app
+/api/v1/admin/unadopted?query=alice%2Flegacy-site
+/api/v1/repos/alice/tools/milestones?state=open&name=python3
+/api/v1/repos/alice/tools/milestones?state=open&name=powershell
+/api/v1/repos/alice/tools/milestones?state=open&name=ls%20-la
+/api/v1/repos/alice/tools/milestones?state=open&name=.htaccess
+/api/v1/repos/alice/tools/milestones?state=open&name=v1.0
+
 # Pages, raw files and edit pages of files, and the API's call for their
 # contents.
 /owner/repo/src/branch/main/package.json