01507ad8ae
Gitea moved to GKE. The old in-cluster URL http://gitea.git.svc.cluster.local:3000 now has 0 pods behind it. The runner daemon gets connection refused on every poll. Switch both ExternalSecrets to https://git.neuralplatform.ai. The public URL does not require CF Access tokens — the runner can connect without them. CF_ACCESS_CLIENT_ID/SECRET remain for git operations inside CI job containers (via BASH_ENV init script).