Scrub public docs and harden CI gates

.gitea/workflows/ci.yml

@@ -49,7 +49,7 @@ jobs:
           pip install bandit pip-audit ruff --break-system-packages
 
       - name: Ruff lint
-        run: ruff check . || true
+        run: ruff check .
 
       - name: Bandit (advisory)
         run: bandit -r . -q || true
@@ -61,7 +61,7 @@ jobs:
         run: |
           if [ -d tests ] || ls test_*.py *_test.py 2>/dev/null; then
             pip install pytest --break-system-packages
-            pytest -q || true
+            pytest -q
           else
             echo "No tests found — skip"
           fi

README.md

@@ -83,7 +83,7 @@ Levkin migration status and channel map: **[docs/HANDOFF.md](docs/HANDOFF.md)**
 git@git.levkin.ca:ilia/slack-sieve.git
 ```
 
-SSH uses LAN `10.255.255.1` via `Host git.levkin.ca` in `~/.ssh/config` (see homelab ansible docs).
+SSH to Gitea uses your local `~/.ssh/config` `Host git.levkin.ca` entry (see private ansible docs).
 
 ## License
 

docs/HANDOFF.md

@@ -9,7 +9,7 @@
 
 ## Status: Levkin Slack → Mattermost **done** (2026-07-10)
 
-Filtered archive is live on **https://slack.levkin.ca** (team `levkin`, VM `10.255.255.1`).
+Filtered archive is live on **https://slack.levkin.ca** (team `levkin`).
 
 - **18 channels**, ~**299 posts** + attachments (from ~765 cherry-picked Slack messages)
 - Users: Slack `jedi_jew` → MM `ilia`, `ira_feeds` → `ira` (both added to imported channels)
@@ -76,7 +76,7 @@ Official Slack export (JSON)
 |------|------|
 | `~/Downloads/Levkin Slack export Sep 29 2016 - May 27 2026` | Raw official export (~27MB JSON only) |
 | `~/Downloads/Levkin Slack export enriched` | Review + prepare source — JSON + `__uploads/` |
-| `~/Documents/code/slack-sieve/manifest.json` | Triage decisions (local only, not in git) |
+| `manifest.json` (local only, not in git) | Triage decisions (local only, not in git) |
 
 Hydrate: **1109 / 1122** attachments; **13** old files HTTP 401 (expired export token).
 
@@ -85,7 +85,7 @@ Hydrate: **1109 / 1122** attachments; **13** old files HTTP 401 (expired export
 ## Commands
 
 ```bash
-cd ~/Documents/code/slack-sieve
+cd /path/to/slack-sieve
 
 export SLACK_EXPORT_PATH="$HOME/Downloads/Levkin Slack export enriched"
 make review              # http://127.0.0.1:8765