3 Commits

Author	SHA1	Message	Date
lilleman	e4435008ac	Answer architecture round 1: the publish job's write token reaches only the tag push, publishing names main, and the audit's other findings are filed	2026-10-04 23:36:47 +02:00
lilleman	dbe63ab3f4	Answer security round 1: the gate checks out without persisted credentials	2026-10-04 23:36:47 +02:00
lilleman	2ab1110710	Make GitHub canonical: CI and publishing on GitHub Actions, links and package metadata point there, Gitea waits to become a mirror	2026-10-04 23:36:47 +02:00