Use forge mirror for zot, add third-party project guidance

- Updated Step 0.3 to clone zot from forge mirror instead of GitHub
- Added "Third-Party Projects" section to CLAUDE.md explaining:
  - Ask user to mirror 3rd party repos to forge first
  - Clone from mirror to ~/code/3rd/
  - Avoids external dependencies

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

CLAUDE.md

@@ -53,6 +53,16 @@ Some important places you can look:
 ~/code/work  # FORBIDDEN, never go here, avoid searching it
 ```
 
+## Third-Party Projects
+
+When a task requires cloning or using a third-party git repository (e.g., for building from source), **ask the user to mirror it on forge first**, then clone from the mirror:
+- Mirror location: `https://forge.tail8d86e.ts.net/eblume/<project>.git`
+- Clone to: `~/code/3rd/<project>/`
+
+This avoids external dependencies and ensures the project is available even if the upstream is unreachable. Example mirrors:
+- `https://forge.tail8d86e.ts.net/eblume/zot.git` (container registry)
+- `https://forge.tail8d86e.ts.net/eblume/mcquack.git` (LaunchAgent helper)
+
 ## Task Discovery
 
 To discover pending blumeops tasks, run:

docs/k8s-migration.md

@@ -159,8 +159,8 @@ tailscale status | grep registry
 # Ensure Go is installed (via mise or homebrew)
 ssh indri 'go version'
 
-# Clone zot repository
-ssh indri 'git clone https://github.com/project-zot/zot.git ~/code/3rd/zot'
+# Clone zot from forge mirror (not GitHub - avoids external dependency)
+ssh indri 'git clone https://forge.tail8d86e.ts.net/eblume/zot.git ~/code/3rd/zot'
 
 # Build (creates bin/zot-darwin-arm64)
 ssh indri 'cd ~/code/3rd/zot && make binary'