Incomplete vulnerability fixes

Eight random characters in a repo name gave away 700 compromised Gogs servers

Wiz's count of exploited Gogs instances rests on one attacker's habit of leaving its randomly named repositories in place, which makes 700 of 1,500 a floor for a single campaign rather than a measure of who is exposed.