CAT-LAB1: the lab clones through the forge account, and holds no registry secret

npm-package-registry is form none, so the registry pair the lab's clones of
mesh-tools-go used is no longer minted. The lab requires forge-account as the
build modules do; its clones go over ssh through a git and ssh configuration the
mesh writes from that binding. The secret, contributes and MESH_LAB_FORGE_SECRET go.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

modules/lab/module.json

@@ -7,20 +7,13 @@
   ],
   "requires": [
     "npm-package-registry",
+    "forge-account",
     "go-toolchain",
     "node-toolchain"
   ],
-  "contributes": {
-    "npm-package-registry": {
-      "access": "read"
-    }
-  },
   "binds": {
     "npm-package-registry": "${dir:state}/package-registry.json"
   },
-  "secrets": {
-    "npm-package-registry": "${dir:state}/package-registry.secret"
-  },
   "data": {
     "own": [
       {
@@ -61,11 +54,37 @@
       "mode": "0600",
       "template": "files/lab.env"
     },
+    {
+      "id": "forge-git",
+      "type": "file",
+      "path": "${dir:state}/forge.gitconfig",
+      "mode": "0600",
+      "template": "files/forge.gitconfig"
+    },
+    {
+      "id": "forge-ssh",
+      "type": "file",
+      "path": "${dir:state}/forge.ssh",
+      "mode": "0600",
+      "template": "files/forge.ssh"
+    },
+    {
+      "id": "forge-known-hosts",
+      "type": "file",
+      "path": "${dir:state}/forge.known_hosts",
+      "mode": "0644",
+      "template": "files/forge.known_hosts"
+    },
     {
       "id": "git",
       "type": "package",
       "package": "git"
     },
+    {
+      "id": "openssh",
+      "type": "package",
+      "package": "openssh"
+    },
     {
       "id": "make",
       "type": "package",
@@ -108,7 +127,7 @@
           "MESH_LAB_WORK": "${dir:work}",
           "MESH_LAB_ENV_FILE": "${dir:state}/lab.env",
           "MESH_LAB_FORGE_BINDING": "${dir:state}/package-registry.json",
-          "MESH_LAB_FORGE_SECRET": "${dir:state}/package-registry.secret"
+          "MESH_LAB_FORGE_GIT": "${dir:state}/forge.gitconfig"
         }
       },
       {