diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 53c580d..f19bad5 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -69,10 +69,10 @@ jobs:
 
       - name: Publish to Gitea PyPI registry
         env:
-          # The auto-provided token works for the same owner's package registry.
-          # Override with a PACKAGE_REGISTRY_TOKEN secret if your instance needs it.
+          # REGISTRY_TOKEN is a Gitea access token with package read/write scope.
+          # The auto GITHUB_TOKEN is not granted package-write here, so we use it.
           TWINE_USERNAME: ${{ github.actor }}
-          TWINE_PASSWORD: ${{ secrets.PACKAGE_REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
+          TWINE_PASSWORD: ${{ secrets.REGISTRY_TOKEN }}
         run: |
           # Gitea's PyPI registry does not support twine's --skip-existing, so
           # we run a plain upload and tolerate an "already exists" conflict in