portable: ci: update MacOS image Cirrus CI is retiring its Intel-based MacOS VMs in favour of using M1 VMs which means a newer image.

getpwuid() returns NULL without setting errno if no user is found pointed out by millert@

zap double grp.h include spotted by Thomas

forward-declare conf_new_access_rule not all yacc implementations put the section in the same order: with OpenBSD' yacc it's fine, with GNU' bison it results in a warning about using an undeclared function conf_new_access_rule. extracted from -portable via thomas, ok stsp@

show full URL during got clone/fetch/send discussed with and ok jamsek, stsp

regress: consistently use ed -s didn't know about -s when writing those tests; saves some output redirection. ok jamsek

portable: add reference_parse to got-send-pack

rename GOTD_SOCK_FILENO to GOTD_FILENO_MSG_PIPE for clarity (it's not a socket)

cope with deleted references when reloading the tog log view ok op jamsek

sync files from diff.git 1dce05e8f99e9ab3e9229bf59e061ad0201a08e8

always cast ctype' is*() arguments to unsigned char ok stsp@

tedu Ted's copyright added to gotd.c by accident; doas-derived code is in auth.c

add a gotd auth test case for an explicitly denied group ok op@

add a gotd auth test case for explicitly denied users ok op@

add a test case for requests from users not listed in gotd.conf ok op@

fix group membership check in gotd auth ok op@

add missing RO and RW tokens; pointed out by op@

implement per-repository read/write authorization rules in gotd ok op@

gotd: Don't include stdlib.h twice

put manual page sections in the proper order

gotd.8: Add missing .El; gotd.conf.5: Fix typo EL -> El

gotsh.1: Add missing .Ed

fix gotctl usage string

got send: show server error Print the error message reported by the remote server when failing to update a branch (for e.g. because of a server-side check.) Reported by gonzalo@, with help and ok stsp@.

gotwebd: fix memleak in error path ok stsp@