checkpoint: multi-repo Gitea ingestion, per-project repos, rotation anchor_sha fix

Pre-existing uncommitted work found at session start: rotation now emits
anchor_sha on TaskReleased (previously silently dropped by store.Append
validation), multi-repo Gitea provider support, per-project git worktree
roots, and associated test coverage. Committing as a checkpoint before
starting remediation work tracked in AUDIT.md.

deploy/gitea.example.json

@@ -0,0 +1,18 @@
+[
+  {
+    "project": "correx",
+    "base_url": "https://gitea.example.internal",
+    "owner": "kami",
+    "repo": "correx",
+    "token": "REPLACE_ME",
+    "webhook_secret": "REPLACE_ME"
+  },
+  {
+    "project": "maven",
+    "base_url": "https://gitea.example.internal",
+    "owner": "kami",
+    "repo": "maven",
+    "token": "REPLACE_ME",
+    "webhook_secret": "REPLACE_ME"
+  }
+]