Record milestone 0.8 status: pipeline complete, green-on-main pending Gitea runner

PHASE0_PLAN 0.8 marked in progress with the remaining exit check;
ARCHITECTURE 9.3 and the plan's CI-provider question resolved to Gitea
Actions; YPMS-POAM-042 to in progress; status handoff gets 0.8 details,
runner-registration steps, local gate commands, and the accumulated
upstream-to-OWC list.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ARCHITECTURE.md

@@ -513,7 +513,7 @@ Compute choice — App Service vs. Container Apps vs. AKS — is a Phase 0 sub-d
 ### 9.3 IaC and CI/CD
 
 - **IaC**: Bicep (matches Azure-native tooling and OCTO templates). Tracked in `infra/`.
-- **CI**: GitHub Actions (or Azure DevOps, matching OWC — confirm at Phase 0).
+- **CI**: Gitea Actions on `gitea.doesworks.net` (decided 2026-10-01 — Gitea is the DOES CI host). Workflow at `.gitea/workflows/ci.yml`.
 - **Pipeline gates**: unit tests, SAST (ruff + a security-focused linter like bandit), SCA (pip-audit or safety), secret scanning (gitleaks), SBOM (CycloneDX; `YPMS-POAM-042`).
 - **Deploy**: environment promotion (dev → test → prod) with approvals for prod.
 - **Migrations**: Alembic auto-applied via a migration container at deploy time; migrations are immutable once merged (OWC hard rule).