Enable Forgejo Actions (Phase 1) (#48)

## Summary
- Refactor Forgejo app.ini to be managed by ansible with secrets from 1Password
- Enable Forgejo Actions in config (`[actions] ENABLED = true`)
- Add `repo.actions` to DEFAULT_REPO_UNITS
- Clean up unused MySQL database fields (we use SQLite)

## Phase 1 Progress
This PR covers the first part of Phase 1 (ci-cd-bootstrap plan):
- [x] Refactor app.ini to ansible template
- [x] Store secrets in 1Password
- [x] Enable Actions in config
- [ ] Deploy config changes (pending review)
- [ ] Create runner registration token
- [ ] Deploy runner to k8s
- [ ] Test with simple workflow

## Deployment and Testing
- [ ] Run `mise run provision-indri -- --tags forgejo` to deploy
- [ ] Verify Forgejo restarts correctly
- [ ] Verify Actions tab appears in repo settings

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/48

.forgejo/workflows/test.yaml

@@ -0,0 +1,29 @@
+name: Test CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout (git clone)
+        run: |
+          # For PRs use head_ref (branch name), for pushes use ref_name
+          BRANCH="${{ gitea.head_ref || gitea.ref_name }}"
+          git clone --depth 1 --branch "$BRANCH" \
+            "${{ gitea.server_url }}/${{ gitea.repository }}.git" .
+        env:
+          GIT_SSL_NO_VERIFY: "true"
+
+      - name: Hello World
+        run: |
+          echo "Hello from Forgejo Actions!"
+          echo "Runner: $(hostname)"
+          echo "Repository: ${{ gitea.repository }}"
+          echo "Event: ${{ gitea.event_name }}"
+          echo "Ref: ${{ gitea.ref }}"
+          ls -la