Depend on tagged Reef v0.1.8

Drops the local replace and the CI step that checked out Reef.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -11,21 +11,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # Sandbar needs secretbox, which is not in a tagged Reef release yet. Build against Reef's
-      # main branch until it is, then delete this step and the replace line in go.mod.
-      - uses: actions/checkout@v4
-        with:
-          repository: Veillax/reef
-          path: reef-src
-          token: ${{ secrets.REEF_TOKEN }}
-
       - uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
 
-      - name: Use the checked-out Reef
-        run: go mod edit -replace git.veillax.com/Veillax/reef=./reef-src
-
       - name: Formatting
         run: |
           unformatted=$(gofmt -l cmd internal)