Fix the defects found by the live end-to-end run, add RC-017

- Close stdin for ssh, git, curl and the framework scripts, so a real ssh
  no longer swallows answers meant for later prompts.
- Count LICENSE and LICENSE + README.md (what Gitea creates) as content
  the script made, so a partly created repository can be reused.
- Document the observed token scopes (write:user for user-owned Gitea
  repositories) and the Gitea README.md in the README.
- Correct criterion 2 of MIL-002 (new Proposed version row).
- Record the run and the final security review as RC-017.
- Tests: stdin regression, initial_only reuse, other files count as
  content, example config needs its address edited.

Task: MIL-003#6
Task: MIL-002#1
Refs #20

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

src/lib/git.sh

@@ -6,13 +6,14 @@
 #
 # Provides: git_project, fetch_origin
 
-# git_project DIR ARGS...: run git in DIR. Prompts are switched off, so a
+# git_project DIR ARGS...: run git in DIR. Prompts are switched off and stdin
+# is closed (git must not eat the answers meant for later prompts), so a
 # missing credential or SSH key fails at once instead of waiting for input.
 git_project() {
   local dir="$1"
   shift
   GIT_TERMINAL_PROMPT=0 GIT_SSH_COMMAND="${GIT_SSH_COMMAND:-ssh} -o BatchMode=yes" \
-    git -C "$dir" "$@"
+    git -C "$dir" "$@" </dev/null
 }
 
 # fetch_origin DIR: fetch the Gitea repository into the project. Over SSH the