Addresses PR #1 feedback: GITEA_TOKEN shouldn't be exported globally
(visible to every process in the shell), only to gitea-pr itself.
Defaults to ~/.config/gitea/token (chmod 600); GITEA_TOKEN env var
still works as an override for one-off invocations.
Addresses PR #1 feedback: host config should live in the environment
(~/.profile.local), not be hardcoded in the script, with a clear error
if unset. Also fixes gitea-pr comments to surface inline diff comments
from reviews, not just issue comments and top-level review bodies --
the review that requested this change would have been invisible to
gitea-pr comments without this fix.