Join: mesh-build-go's manifest gives invokes once; gitea's row names all three

A3's merge auto-merged a second invokes into mesh-build-go's manifest
(the registry seats' publish verbs beside the indexer's read tool); a
decoder kept the last and dropped the read tool, which
TestTheModuleReadsTheIndexersManifests caught. One list holds both.
gitea's package-registry row named only the builder's versions; the
manifest also asks the indexer's modules and records a re-read.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

modules/gitea/cmd/package-registry/retention_test.go

@@ -473,7 +473,8 @@ func TestToolsAreTheOnesTheReadmeNamesAndSayWhatTheyDo(t *testing.T) {
 			t.Errorf("the manifest does not require %s", want)
 		}
 	}
-	if strings.Join(m.Invokes, ",") != "mesh-delivery-builder.builder_versions" {
+	// The retention asks the builder's versions; the forge's other bundles ask the indexer's modules and record a re-read.
+	if strings.Join(m.Invokes, ",") != "mesh-delivery-indexer.indexer_read_modules,seat:mesh-hand-acts.hand-act,mesh-delivery-builder.builder_versions" {
 		t.Errorf("the manifest invokes %v", m.Invokes)
 	}
 	if len(m.Tools) != 0 {