fix: autenticar mirror GitLab via PRIVATE-TOKEN header

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: MariaHilmar

.github/workflows/mirror-gitlab.yml

@@ -1,11 +1,8 @@
 # Espelha main do GitHub para GitLab a cada push.
 #
-# Segredos no GitHub (Settings → Secrets → Actions):
-#   GITLAB_MIRROR_TOKEN  — token ou senha do Deploy Token / Project Access Token
-#   GITLAB_MIRROR_USER   — opcional; padrao oauth2 (PAT pessoal) ou usuario do Deploy Token
-#
-# Recomendado (plano gratuito): Deploy Token no projeto GitLab
-#   Settings → Repository → Deploy tokens → write_repository
+# Secret no GitHub: GITLAB_MIRROR_TOKEN
+# Token no GitLab: Project Access Token com write_repository
+#   https://gitlab.com/mariahilmar-group/mgi-kpi-pipeline/-/settings/access_tokens
 
 name: Mirror to GitLab
 
@@ -29,14 +26,13 @@ jobs:
 
       - name: Push to GitLab
         env:
-          GITLAB_MIRROR_USER: ${{ secrets.GITLAB_MIRROR_USER }}
           GITLAB_MIRROR_TOKEN: ${{ secrets.GITLAB_MIRROR_TOKEN }}
         run: |
           if [ -z "$GITLAB_MIRROR_TOKEN" ]; then
             echo "ERRO: defina GITLAB_MIRROR_TOKEN nos secrets do GitHub."
             exit 1
           fi
-          GITLAB_USER="${GITLAB_MIRROR_USER:-oauth2}"
           git config user.name "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git push "https://${GITLAB_USER}:${GITLAB_MIRROR_TOKEN}@gitlab.com/mariahilmar-group/mgi-kpi-pipeline.git" "HEAD:refs/heads/main"
+          git remote add gitlab https://gitlab.com/mariahilmar-group/mgi-kpi-pipeline.git
+          git -c "http.extraHeader=PRIVATE-TOKEN: ${GITLAB_MIRROR_TOKEN}" push gitlab HEAD:main