fix: set global signing secret fallback correctly

When falling back to the transfer secret we need to set the global
cfg.URLSigningSecret as well otherwise the Validate() step fails.
This commit is contained in:
Internal Server Error - Gitea: Git with a cup of tea
500 Internal Server Error

Gitea Version: 1.28.0+dev-477-g8b6ad49a5f