sjat c1323a3f29 feat(make): registry-login via vaulted Forgejo token (kaizen) ... scripts/registry-login.sh reads vault.forgejo.registry_token and pipes it to docker login --password-stdin (never echoed, never on argv); 'make registry-login' wires it with the venv binaries. Adds the operator-minted CHANGEME vault stub (fill via make edit-vault) and a per-machine prereq note in the claude-code-setup runbook, so 'make caddy-image-push'/'molecule-image-push' become agent-completable non-interactively. Consumes the 2026-06-15 signal in docs/FRICTION.md. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-17 17:50:07 +02:00
..
group_vars	feat(make): registry-login via vaulted Forgejo token (kaizen)	2026-06-17 17:50:07 +02:00
hosts.yml	inventory: add ubongo to control group; set ssh-from-control addr	2026-06-11 10:32:24 +02:00
offsite.yml	feat(tf): provision askari — cx23/hel1 (CAX11 ARM was out of stock)	2026-06-14 16:23:01 +02:00