3b8a2c4e75
R-001: Gitea container registry (OCI, docker login/push, anon pull when public) R-002: tea repos edit --private false (visibility flip for REQ-045) R-003: Gitea releases API (Authorization: token header, asset download URLs) R-004: ORCA_HOME propagation audit (3 sites: certpaths/store/init) R-005: distroless static-debian12 base (CGO-free, modernc/sqlite) R-006: install.sh curl|sh conventions + in-place update pattern Pitfalls P-001..P-003 (docker-in-CI, public-history leak, CGO_ENABLED=0) PERSONAS.md: devops-engineer reactivated, data/security/network deactivated for v0.5 ---ci--- project: orca phase: 0 milestone: v0.5 status: research ---/ci---