Enable branch protection and Woodpecker for forgebot repos

- Add forgebot team with unkinben and benvin members
- Enable branch protection on main for forgebot and forgebot-skills
- Team-based approval and merge whitelists
- Register both repos with Woodpecker CI
- CI status checks: pre-commit, test, build (forgebot); validate (skills)

config/git.unkin.net/unkin/repository/forgebot-skills.yaml

@@ -1,2 +1,15 @@
 description: "Skill definitions for forgebot agents"
 private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/validate"
+    approval_whitelist_teams:
+      - "forgebot"
+    merge_whitelist_teams:
+      - "forgebot"
+woodpecker: true

config/git.unkin.net/unkin/repository/forgebot.yaml

@@ -1,2 +1,17 @@
 description: "K8s operator + API for AI agent dispatch from git forges"
 private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/test"
+      - "ci/woodpecker/pr/build"
+    approval_whitelist_teams:
+      - "forgebot"
+    merge_whitelist_teams:
+      - "forgebot"
+woodpecker: true

config/git.unkin.net/unkin/team/forgebot.yaml

@@ -0,0 +1,13 @@
+description: "forgebot maintainers"
+permission: none
+include_all_repositories: false
+can_create_repos: false
+repositories:
+  - forgebot
+  - forgebot-skills
+  - container-agent-base
+  - container-agent-dev
+  - container-agent-infra
+members:
+  - unkinben
+  - benvin