- Add Forgejo Actions Secrets section for repo-level CI/CD secrets
- Note that secrets are also in 1Password but manually synced
- Add missing build-blumeops.yaml workflow to list
- Clarify distinction between server config secrets vs CI/CD secrets
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>