docs: document gitea-first homelab deploys

Switch CLAUDE.md and AGENTS.md to Gitea-primary language. Remove
github-runner from the management plane now that Gitea Actions handles
Caddy reloads and famapp builds. Disable GitHub deploy workflow.
Update apply-compose.ps1 status text.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

AGENTS.md

@@ -15,9 +15,11 @@ from your tool's user-level instructions (`~/.codex/AGENTS.md` / `~/.gemini/GEMI
 - **The repo is canonical.** Portainer polls `main` every 5 min and redeploys any app stack whose
   `stacks/<domain>/*` files changed. Editing here changes nothing until you `git push`.
 - **Deployment channels:**
-  - `stacks/<domain>/*` → git push → Portainer redeploys that stack (≤ 5 min).
-  - `Caddyfile` → git push → runner workflow `scp`s it + reloads Caddy (or `apply-compose.ps1 -Caddy`).
+  - `stacks/<domain>/*` → git push to Gitea → Portainer polls every 5 min and redeploys that stack. GitHub is a temporary mirror only.
+  - `Caddyfile` → git push → Gitea Actions (`.gitea/workflows/deploy-caddy.yml`) copies it + reloads Caddy. Fallback: `apply-compose.ps1 -Caddy`.
   - `portainer-compose.yml` / `vault.hcl` → `apply-compose.ps1 -Portainer` (Portainer can't manage itself).
+- **Portainer app stacks must have empty UI environment variables.** All config comes from `stack.env` via `env_file: stack.env`. Run `scripts/check-portainer-stack-env.ps1` before pushing.
+- **famapp images** build on Gitea Actions (`v*` tags) and push to `registry.ginnoir.com/ginnoir/famapp`.
 - **Secrets are committed intentionally.** `.env` and `stacks/*/stack.env` are versioned in this
   PRIVATE repo. Do **not** scrub or gitignore them.
 - **Line endings:** `.gitattributes` forces LF. Never push CRLF (especially `stack.env`) — stray