path "platform/data/workloads/policy-nexus/forgejo-source-read" { capabilities = ["read"] } path "platform/metadata/workloads/policy-nexus/forgejo-source-read" { capabilities = ["read"] }