gitea: full nox module — client, tools and events (ADR 0044/0046)

Git hosting. 15 tools (repos, issues, PRs, labels, api passthrough) moved out
of the shared sdk. Emits repo.created (from a light poll, catching repos born
of git push or the web UI), issue.opened and pull.merged (from the tools at the
moment of the action) — the poll owns repo.created alone so it is never
announced twice. Typechecks; manifest parses.

modules/gitea/module.json

@@ -18,6 +18,11 @@
   "capabilities": [
     "container-runtime"
   ],
+  "emits": [
+    "module.gitea.repo.created",
+    "module.gitea.issue.opened",
+    "module.gitea.pull.merged"
+  ],
   "listens": [
     {
       "port": 3000,
@@ -33,7 +38,8 @@
     }
   ],
   "own-secrets": {
-    "internal-token": "/var/lib/gitea/internal-token.secret"
+    "internal-token": "/var/lib/gitea/internal-token.secret",
+    "broker": "/var/lib/gitea/broker"
   },
   "resources": [
     {