Document two OpenBao instances and add forgejo-openbao-eso-token-apply for ClusterSecretStore openbao-forgejo on bao.coulomb.social.