checkpoint: multi-repo Gitea ingestion, per-project repos, rotation anchor_sha fix

Pre-existing uncommitted work found at session start: rotation now emits
anchor_sha on TaskReleased (previously silently dropped by store.Append
validation), multi-repo Gitea provider support, per-project git worktree
roots, and associated test coverage. Committing as a checkpoint before
starting remediation work tracked in AUDIT.md.

deploy/config.example.json

@@ -0,0 +1,66 @@
+{
+  "projects": [
+    {
+      "id": "correx",
+      "machine_affinity": ["mainframe"],
+      "repo": "/var/lib/orchestra/repos/correx.git",
+      "worktree_root": "/var/lib/orchestra/worktrees/correx"
+    },
+    {
+      "id": "maven",
+      "machine_affinity": ["mainframe", "satellite"]
+    }
+  ],
+  "machines": [
+    {
+      "id": "mainframe",
+      "address": "10.0.0.10:9145"
+    },
+    {
+      "id": "satellite",
+      "address": "10.0.0.11:9145"
+    }
+  ],
+  "herdrs": [
+    {
+      "id": "mainframe-claude-1",
+      "machine_id": "mainframe",
+      "harness": "claude",
+      "protocol": "1",
+      "capabilities": ["code", "review"],
+      "concurrency": 2,
+      "quota_limit_5h": 50,
+      "quota_limit_weekly": 500
+    },
+    {
+      "id": "satellite-claude-1",
+      "machine_id": "satellite",
+      "address": "10.0.0.11:9245",
+      "harness": "claude",
+      "protocol": "1",
+      "capabilities": ["code"],
+      "concurrency": 1,
+      "quota_limit_5h": 20,
+      "quota_limit_weekly": 200
+    },
+    {
+      "id": "mainframe-codex-1",
+      "machine_id": "mainframe",
+      "harness": "codex",
+      "protocol": "1",
+      "capabilities": ["code"],
+      "concurrency": 1,
+      "quota_limit_weekly": 300
+    },
+    {
+      "id": "satellite-opencode-1",
+      "machine_id": "satellite",
+      "address": "10.0.0.11:9345",
+      "harness": "opencode",
+      "protocol": "1",
+      "capabilities": ["code", "review"],
+      "concurrency": 1,
+      "quota_limit_weekly": 300
+    }
+  ]
+}