CAT-G1, G2: the forge's Go bundle serves both package seats' verbs into its package registry, for both packages

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

modules/gitea/module.json

@@ -5,7 +5,28 @@
   "requires": [
     "postgres-database",
     "route",
-    "secret"
+    "secret",
+    {
+      "name": "incoming",
+      "storage": "object-store",
+      "template": "objects",
+      "options": {
+        "max-mib": 2048
+      }
+    },
+    {
+      "name": "transfers",
+      "storage": "key-value",
+      "template": "state",
+      "options": {
+        "ttl-seconds": 86400
+      }
+    },
+    {
+      "name": "findings",
+      "storage": "key-value",
+      "template": "state"
+    }
   ],
   "contributes": {
     "postgres-database": {
@@ -135,7 +156,23 @@
   "claims": [
     {
       "name": "npm-package-registry",
-      "scope": "mesh"
+      "scope": "mesh",
+      "serves": [
+        "publish",
+        "publish-part",
+        "remove",
+        "versions"
+      ]
+    },
+    {
+      "name": "go-package-registry",
+      "scope": "mesh",
+      "serves": [
+        "publish",
+        "publish-part",
+        "remove",
+        "versions"
+      ]
     },
     {
       "name": "git",
@@ -197,6 +234,12 @@
       "default": [
         "jschoubben"
       ]
+    },
+    "callers": {
+      "type": "string",
+      "trusted": true,
+      "default": "",
+      "description": "per verb of the two package seats, the callers that may call it (JSON object of verb to callers; * every proved caller, operator the operator's session); empty is design 51's list: publish and publish-part mesh-build-go and mesh-build-node, remove mesh-delivery-builder, versions anyone"
     }
   },
   "facts": {
@@ -474,14 +517,14 @@
         }
       },
       {
-        "name": "npm-registry",
+        "name": "package-registry",
         "kind": "bundle",
         "language": "go",
         "system": "arch",
-        "from": "cmd/npm-registry",
-        "binary": "npm-registry",
+        "from": "cmd/package-registry",
+        "binary": "package-registry",
         "loads": [
-          "npm-registry"
+          "package-registry"
         ],
         "env": {
           "MESH_GITEA_URL": "http://127.0.0.1:${port:3000}",
@@ -594,5 +637,8 @@
     "mesh-delivery-checker.owed",
     "mesh-delivery-indexer.modules",
     "mesh-delivery-gate.source"
+  ],
+  "invokes": [
+    "mesh-delivery-builder.builder_versions"
   ]
 }