Add Gitea maintainer-edit fix references

[cookesan]

Adds Gitea maintainer-edit fix references to GHSA-mm7c-rhg6-qr4r.

Audit refresh, July 8, 2026:

• Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
• Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-mm7c-rhg6-qr4r/GHSA-mm7c-rhg6-qr4r.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
• Revalidated the added public references in the diff; all resolve through their source site or registry.

[cookesan]

Maintainer audit: this only expands the reference set for the Gitea maintainer-edit advisory. The upstream fix go-gitea/gitea#37479 merged to 92628036217256f860fff2cc2fee59d2a1b4b977, the release/v1.26 backport #37484 merged to 74e515623bcf283ba0e803f14b2a9f67ddb963c8, the v1.26.2 release and Go module record resolve, and CVE-2026-26231 is present in NVD. The advisory JSON parses, the committed diff passes git diff --check, the PR is merge-clean, and advisory processing is successful. No package, affected range, severity, or database metadata is changed.