style(framework): format forge wrapper README table

packages/mosaic/framework/tools/git/README.md

@@ -48,11 +48,11 @@ verify `/user` against that identity before a write. Operators provision these
 files; the wrappers do not create them. `<brain>` is `MOSAIC_BRAIN_HOME` when
 set, otherwise `~/.mosaic`.
 
-| Host and identity | Token file |
-| --- | --- |
-| `git.mosaicstack.dev` or `git.uscllc.com`, with `<brain>/fleet/agents/<id>/` present | `<brain>/fleet/agents/<id>/secrets/gitea-{mosaicstack,usc}-<id>.token` |
-| Those hosts, other identities | `~/.config/mosaic/secrets/gitea-tokens/gitea-{mosaicstack,usc}-<id>.token` |
-| Any other host, including github.com | `<brain>/credentials/forge/<host>/<id>.token` |
+| Host and identity                                                                    | Token file                                                                 |
+| ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------- |
+| `git.mosaicstack.dev` or `git.uscllc.com`, with `<brain>/fleet/agents/<id>/` present | `<brain>/fleet/agents/<id>/secrets/gitea-{mosaicstack,usc}-<id>.token`     |
+| Those hosts, other identities                                                        | `~/.config/mosaic/secrets/gitea-tokens/gitea-{mosaicstack,usc}-<id>.token` |
+| Any other host, including github.com                                                 | `<brain>/credentials/forge/<host>/<id>.token`                              |
 
 Use the actual hostname (and port when specified) as `<host>` and the matching
 instance name in the two fleet-host paths. Keep tokens private and out of git.