better tag fetching

in addition to using the checkout action for all the fetches, this will
make sure we get a deep clone of the repository that can be used to
resolve tags for pull requests if the submodule is ahead of the latest
tag in the main origin

.forgejo/workflows/forgejo-deb.yml

@@ -20,6 +20,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+          fetch-depth: 0
+          fetch-tags: true
+          filter: tree:0
 
       - uses: actions/setup-node@v3
         with:
@@ -34,12 +37,6 @@ jobs:
         id: ciprep
         run: ./.ci-make.sh actions-prep build-forgejo-deb
 
-      - name: fetch tags
-        run: |
-          git config --add safe.directory '*'
-          git fetch --tags --force
-          git submodule foreach 'git fetch --tags --force'
-      
       - uses: crystal/install-jq-action@v2.1.0
       - run: ./.ci-make.sh ci-verify forgejo