Make five manifests the milestone changed pass the indexer's judge: an event in one place, one form per state, a digest of a text field, trusted and runtime config values (issue 1966)

messenger's refusal took its declaration of operator-channel out of the judged catalogue, so claude-code's use of it
was refused too. distribution's two remaining refusals (its program builds beside the artifact store it provides,
and its only health check is its own tool) are a design question left to the lead.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

modules/gitea/module.json

@@ -26,11 +26,6 @@
       "options": {
         "key-ttl": true
       }
-    },
-    {
-      "name": "findings",
-      "storage": "key-value",
-      "template": "state"
     }
   ],
   "contributes": {
@@ -230,6 +225,7 @@
     "callers": {
       "type": "string",
       "trusted": true,
+      "runtime": true,
       "default": "",
       "description": "per verb of the two package seats, the callers that may call it (JSON object of verb to callers; * every proved caller, operator the operator's session); empty is design 51's list: publish and publish-part mesh-build-go and mesh-build-node, remove mesh-delivery-builder, versions anyone"
     }