Erich Blume 74bd5abe54 Add IaC for Forgejo Actions secrets via Ansible (#107) ... ## Summary - New `forgejo_actions_secrets` Ansible role syncs repository-level Actions secrets from 1Password to Forgejo via the Forgejo API - Replaces manual process of copying secrets from 1Password to Forgejo UI - Documents the one-time PAT setup requirement in forgejo.md ## Manual Setup Required Before this role can run, a Forgejo PAT must be created: 1. Go to https://forge.ops.eblu.me/user/settings/applications 2. Create a new token with `write:repository` scope 3. Store it in 1Password → "Forgejo Secrets" item → `api-token` field This has already been done. ## Test Plan - [x] Ran `mise run provision-indri -- --tags forgejo_actions_secrets` successfully - [x] Verified secret synced (API returned 204 = updated existing) - [x] Ansible-lint passes 🤖 Generated with [Claude Code](https://claude.ai/code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/107		2026-02-04 09:11:01 -08:00
..
.gitkeep	Add towncrier changelog system (#86)	2026-02-03 11:48:13 -08:00
feature-forgejo-actions-secrets-iac.infra.md	Add IaC for Forgejo Actions secrets via Ansible (#107)	2026-02-04 09:11:01 -08:00