NK-WP-0056-T13: rapp-bounded-executor pushed to Forgejo (rebased onto stub)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196

workplans/NK-WP-0056-bounded-executor-path.md

@@ -545,7 +545,7 @@ manifest check, and nothing is applied.
 - `.forgejo/workflows/bounded-executor-image.yaml`, and the executor tests are in `identity-journeys.yaml`;
 - the pilot example pins the executed files (`executor.py`, `operations.py`, `journey.py`). 35 tests.
 
-**2026-10-31, rapp reshaped.** `~/rapp-bounded-executor` is a local git repo (`c9184ba`, no remote yet):
+**2026-10-31, rapp reshaped.** `~/rapp-bounded-executor` is at `forgejo-remote:coulomb/rapp-bounded-executor` (`4517aaf`; rebased onto the Forgejo stub, so local hashes changed):
 
 - Standing objects in `sso`:
   - `manifests/rbac.yaml`, a byte-identical copy of `sso-mfa/k8s/bounded-executor/rbac.yaml`. A test fails on
@@ -580,7 +580,7 @@ Left:
 **Done 2026-10-31.**
 
 - The image workflow for `ba9d266` succeeded, and the digest
-  `sha256:8f40f998738789aec21898fe2a36fda56f33c6ae2bb5749f88583d4d70f070c2` is pinned in the rapp (`deec102`).
+  `sha256:8f40f998738789aec21898fe2a36fda56f33c6ae2bb5749f88583d4d70f070c2` is pinned in the rapp (`e9a943b`).
 - `check-oci-image.sh` found the manifest, and `rmgr rapp validate` passes. 13 rapp tests.
 - `rmgr rapp pin-image` only scans `manifests/`, so the pin went in by hand. A test keeps the Makefile, Job template
   and declaration pins equal.
@@ -588,7 +588,8 @@ Left:
 
 Follow-up outside the done criteria:
 
-- Founder: create the Forgejo remote `coulomb/rapp-bounded-executor` and push.
+- DONE 2026-10-31: the founder created the Forgejo repo with a README stub. The local commits were rebased onto it
+  (the local README kept) and pushed; HEAD is `e779a22`.
 
 Follow-up 2026-10-31 for T10/T06 reachability: