1dfbddab92
Provision the Gitea repo for a generic app-token Vault/OpenBao secrets engine that issues short-lived signed JWTs for self-made services, replacing per-app static bearer Secrets. Mirrors the existing plugin repo entries (squash-only, main branch protection, PR CI checks). Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT