Phase 1: dual-push to Forgejo registry during consolidation bake

Adds forgejo.viktorbarzin.me/viktor/payslip-ingest as a second push
target alongside the existing registry.viktorbarzin.me/payslip-ingest.
Phase 4 drops the registry.viktorbarzin.me line after the bake.

Plan: github.com/ViktorBarzin/infra docs/plans/2026-05-07-forgejo-
registry-consolidation-plan.md.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

.woodpecker.yml

@@ -15,13 +15,21 @@ steps:
       username: "viktorbarzin"
       password:
         from_secret: dockerhub-pat
+      # Dual-push during the Forgejo registry consolidation bake. After
+      # ≥14 days clean, registry.viktorbarzin.me drops out (Phase 4).
       repo:
         - registry.viktorbarzin.me/payslip-ingest
+        - forgejo.viktorbarzin.me/viktor/payslip-ingest
       logins:
         - registry: registry.viktorbarzin.me
           username: viktorbarzin
           password:
             from_secret: registry-password
+        - registry: forgejo.viktorbarzin.me
+          username:
+            from_secret: forgejo_user
+          password:
+            from_secret: forgejo_push_token
       dockerfile: Dockerfile
       context: .
       auto_tag: true