Point npm handoff and ArgoCD sourceRepos at Forgejo

Forgejo is primary git/OCI source; Gitea URL retained for emergency rollback.

argocd/bootstrap/01-railiance-tenants-project.yaml

@@ -9,8 +9,9 @@ metadata:
 spec:
   description: Guardrails for Railiance tenant applications deployed by ArgoCD.
   sourceRepos:
-    - https://gitea.coulomb.social/coulomb/*.git
     - https://forgejo.coulomb.social/coulomb/*.git
+    # Emergency rollback only (T12 Option A through 2026-08-07)
+    - https://gitea.coulomb.social/coulomb/*.git
   destinations:
     - server: https://kubernetes.default.svc
       namespace: "*"

docs/whynot-design-npm-publish-handoff.md

@@ -18,7 +18,7 @@ This is the next-session handoff for `CCR-2026-0001` and the
 - Secret path: `platform/workloads/coulomb/whynot-design/npm-publish`
 - Field: `NPM_AUTH_TOKEN`
 - Token source: Gitea package token for
-  `https://gitea.coulomb.social/api/packages/coulomb/npm/`
+  `https://forgejo.coulomb.social/api/packages/coulomb/npm/`
 
 The operator reported that the Gitea token was generated and stored in OpenBao.
 Using the temporary operator token only for non-secret infrastructure work, Codex