fred
80920950a4
ci/woodpecker/pr/ci Pipeline failed
SF1: test-gitea-login-resolution.sh runs 3/3 green under an empty HOME (no tea config, no credentials, no brain), so its #1007 'resolves real credentials' exclusion is stale. Added to ci.yml next to the other hermetic git suites and removed from the exclusions file. Control: re-adding the exclusion line turns check-test-enumeration.sh red (rc=1). SF2: tools/git/README.md identity section now carries the tea-path ladder (identity -> instance -> <instance>-<identity> login -> fail closed) and points at tools/fleet/seat-logins.sh as the projector that provisions those logins.