Block a user
fix(ci): convert dind to a native sidecar; delete both wait loops
fix(ci): delete the per-branch push triggers instead of adding feat/**
docs(runbooks): the PR flow, not git push origin main
docs: correct CI/platform documentation that was stale or wrong
feat(plex): wire PLEX_CLAIM from a SOPS Secret (placeholder value)
docs(gitea): a skipped job reports SUCCESS, not pending
docs: delivery contract for agents + record that the merge gate does not exist