Fix the defects found by the live end-to-end run, add RC-017

- Close stdin for ssh, git, curl and the framework scripts, so a real ssh
  no longer swallows answers meant for later prompts.
- Count LICENSE and LICENSE + README.md (what Gitea creates) as content
  the script made, so a partly created repository can be reused.
- Document the observed token scopes (write:user for user-owned Gitea
  repositories) and the Gitea README.md in the README.
- Correct criterion 2 of MIL-002 (new Proposed version row).
- Record the run and the final security review as RC-017.
- Tests: stdin regression, initial_only reuse, other files count as
  content, example config needs its address edited.

Task: MIL-003#6
Task: MIL-002#1
Refs #20

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

tests/lib.sh

@@ -244,6 +244,9 @@ STUB
 write_ssh_stub() {
   cat >"$WORK/bin/ssh" <<STUB
 #!/usr/bin/env bash
+# The real ssh reads standard input until it ends; so does this stub. Whatever
+# is left on the caller's stdin (the answers to later prompts) is lost to it.
+cat >/dev/null
 printf '%s\n' "\$@" >>"\$STUB_DIR/ssh.args"
 if [[ ${1:-0} == 0 ]]; then
   echo "Hi there, gitea-user! You've successfully authenticated, but Gitea does not provide shell access."