Replace insecure: true (skip host key verification) with the actual
forge SSH host key, so ArgoCD verifies the server identity on connect.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
After the forge mirror migration from eblume/ to mirrors/ org, ArgoCD
app definitions and the repo credential template still referenced the
old paths, causing ComparisonError on mirrored-chart apps.
- Widen repo-creds-forge URL prefix to host-wide (matches all forge orgs)
- Update 8 ArgoCD app definitions: eblume/<mirror> → mirrors/<mirror>
- Fix stale alloy clone comment in Ansible defaults
- Bump immich v2.5.2 → v2.5.6 (bug-fix patches)
- Update README bootstrap command and credential docs
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>