Forge Operator — GitHub Migration

This is the version-controlled migration target. Production remains on the existing Forge Operator site until OAuth, the approval ledger, and MCP authentication are migrated and verified.