Gitea sends X-Gitea-Signature as a raw hex digest with no scheme
prefix, unlike GitHub's sha256=<digest> format. Removed the prefix
parsing that was causing every request to fail validation.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
On each restart, CUE pulls the latest code from origin before
binding to the port, so deployments just require a service restart.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Webhook listener that monitors Gitea repos for BLIGHT: triggers in
markdown files, processes them via Gemini 2.5 Flash-Lite, and writes
results back in-place.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
