Keep tokens only in bare repo git configs where git fetch uses them.
The DB remote_address (shown in UI) now stores clean URLs. The mirror
sync script re-injects tokens into git configs every cycle and strips
them from the DB for newly migrated repos.
Mirrored repos don't create ActionCommitRepo records in the action
table, so they're invisible to the contribution heatmap. This adds a
reconcile service that chains after mirror-sync, scans all repos
(personal + org) for commits authored by the Forgejo user, and inserts
the missing action records. Uses the action table as its own cursor
so first run is a full backfill and subsequent runs are incremental.
- Mirror org repos under their actual org (getcompanion-ai/repo) instead
of flattening to harivansh-afk/org--repo
- Auto-create Forgejo orgs when new GitHub orgs are encountered
- Embed GitHub token in git remote URLs after migration to fix Forgejo's
broken credential storage for mirror fetches
- Enable Forgejo Actions
