fix: resolve test failures and remove unavailable dependency

- Remove gitea-mcp-server from dependencies (not yet on PyPI)
- Add starlette to dependencies (needed for middleware)
- Fix HealthCheckBypassMiddleware to actually bypass auth via request.state flag
- Fix test_required_fields to not require gitea_repo (optional for PMO mode)
- Update pytest testpaths to correct location

All 30 tests now pass.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

src/gitea_http_wrapper/middleware/auth.py

@@ -54,6 +54,10 @@ class BearerAuthMiddleware(BaseHTTPMiddleware):
         if not self.auth_enabled:
             return await call_next(request)
 
+        # Skip authentication if marked by HealthCheckBypassMiddleware
+        if getattr(request.state, "skip_auth", False):
+            return await call_next(request)
+
         # Extract Authorization header
         auth_header = request.headers.get("Authorization")
 
@@ -133,8 +137,8 @@ class HealthCheckBypassMiddleware(BaseHTTPMiddleware):
         # Check if request is for a health check endpoint
         if request.url.path in self.health_check_paths:
             logger.debug(f"Bypassing auth for health check: {request.url.path}")
-            # Skip remaining middleware chain for health checks
-            return await call_next(request)
+            # Mark request to skip authentication in BearerAuthMiddleware
+            request.state.skip_auth = True
 
-        # Not a health check, continue to next middleware
+        # Continue to next middleware
         return await call_next(request)

src/gitea_http_wrapper/tests/test_config.py

@@ -18,7 +18,8 @@ class TestGiteaSettings:
             GiteaSettings()
 
         errors = exc_info.value.errors()
-        required_fields = {"gitea_url", "gitea_token", "gitea_owner", "gitea_repo"}
+        # Note: gitea_repo is optional (for PMO mode)
+        required_fields = {"gitea_url", "gitea_token", "gitea_owner"}
         error_fields = {error["loc"][0] for error in errors}
         assert required_fields.issubset(error_fields)