Commit history for src/server/ci
- Rotate runner credentials to a runner-generated token so a lost response cannot lock the runner out or let a leaked old credential mint a new one; keep in-flight old-credential requests working briefly.67ace73⌁taigrr committed
- Make runner credential rotation two-phase, match labels in the claim query, and fail or stop fork jobs when no eligible runner remains or the opt-in is withdrawn.c1370d7⌁taigrr committed
- Fix runner review findings: admin-fixed labels, atomic runner cap, fork jobs fail without an eligible runner or after the opt-in is withdrawn, newest jobs first in the runs API.4b24839⌁taigrr committed
- Add self-hosted runner registration with single-use tokens, rotating credentials, long-poll atomic claims, heartbeats and a fork pull request policy.4b44798⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
7f485b4⌁
- real git forgebcc398c⌁taigrr committed