Protect all public URLs via nginx basic auth; exempt Gitea API/registry/git paths for CI. Co-authored-by: Cursor <cursoragent@cursor.com>
Symfony treats single % as parameter placeholders; double %% for URL-encoded passwords in REDIS_URL and DATABASE_URL. Co-authored-by: Cursor <cursoragent@cursor.com>
Update PostgreSQL, MySQL, Redis, app secrets, and connection URLs for the remote test environment. Co-authored-by: Cursor <cursoragent@cursor.com>