Prepare Gitea checkpoint container workflow

AGENTS.md

@@ -136,4 +136,8 @@ integration owner freezes related work before running shared checks.
 - Use subagents selectively for bounded independent tasks and complex reviews;
   they remain explicitly authorized. Share concise briefs and file ownership.
 - Review, verify, commit and push completed checkpoints automatically under
-  “Push all from now on.” Confirm push success; never force-push or expose secrets.
+  “Push all from now on.” The intended `origin` is
+  `https://git.juiced.computer/admin/Dune.git`; verify the destination and push
+  success. Do not fall back to GitHub, force-push or expose secrets. Gitea
+  Actions and container publication require a configured runner and credentials;
+  a source push alone does not prove an image was published or deployed.