fix(docs+scripts): close cto-inboxos owner drift (REQ-INB-28 + REQ-INB-37)

The v1.1 P0 sweep (commits 7c20d5d, d530921) updated the 3
new shell helpers, the runbook, and 2 runbook lines to point
at jc-capital. It missed 2 files:
- docs/gitea-actions.md:95 (last touched at Phase 4 / INB-33,
  before the v1.0→v1.1 org migration; the v1.1 sweep was
  scoped to .md / .sh created or modified in v1.1)
- scripts/setup_gitea_secrets.sh:4,14,18,28 (pre-existing at
  the v1.0 close; not in the v1.1 diff; filed as v1.1 P1-2
  for v1.2 follow-up but v1.2 was a 0/1 disposition so the
  carry-forward is v1.3)

This commit closes the cto-inboxos owner drift in both files
using the same env-var-resolved default pattern as the v1.1
P0 sweep:
- docs/gitea-actions.md:95 now uses
  ${GITEA_OWNER:-jc-capital}/inboxos
- scripts/setup_gitea_secrets.sh:4,14 use the same
  ${GITEA_OWNER:-jc-capital} pattern in the header
- scripts/setup_gitea_secrets.sh:18 defaults
  GITEA_OWNER to jc-capital
- scripts/setup_gitea_secrets.sh:28 uses
  ${GITEA_OWNER:-jc-capital} in the example

Verified: grep -n cto-inboxos docs/gitea-actions.md
scripts/setup_gitea_secrets.sh returns empty. The script is
still chmod +x with set -euo pipefail (unchanged).

This commit also closes v1.1 backlog item P1-2
(setup_gitea_secrets.sh owner drift, per CI-LOG.md:219-220).

---ci---
project: inboxos
phase: 1
milestone: v1.3
status: execute
tasks_completed: [T1.1]
candidates_closed: [REQ-INB-28, REQ-INB-37]
backlog_closures:
  v1_1_P1_2: REQ-INB-37
files_touched:
  - docs/gitea-actions.md (1 line, line 95)
  - scripts/setup_gitea_secrets.sh (4 lines, 4, 14, 18, 28)
---/ci---

docs/gitea-actions.md

@@ -91,8 +91,8 @@ parallel on the same host.
 
 4. Verify both runners are registered and online:
    ```bash
-   curl -u "$GITEA_USER:$GITEA_PASS" \
-     https://git.cloudinit.dev/api/v1/repos/cto-inboxos/inboxos/actions/runners
+    curl -u "$GITEA_USER:$GITEA_PASS" \
+      https://git.cloudinit.dev/api/v1/repos/${GITEA_OWNER:-jc-capital}/inboxos/actions/runners
    ```
    Expected: 2 entries with `status: "online"` and the
    `self-hosted,linux,x64,gitea-runner:docker` label set.

scripts/setup_gitea_secrets.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # ── InboxOS — Gitea Actions secrets one-shot (Phase 3.1b) ─────
 # Sets the known-value repository secrets on
-#   https://git.cloudinit.dev/cto-inboxos/inboxos
+#   https://git.cloudinit.dev/${GITEA_OWNER:-jc-capital}/inboxos
 # using a Gitea API token supplied by the operator.
 #
 # This is meant to be run ONCE by the board (or anyone with a
@@ -11,11 +11,12 @@
 #
 # Required env:
 #   GITEA_TOKEN   a Gitea user access token with write:repository
-#                 scope on cto-inboxos/inboxos (the token the board
-#                 used to set IMAP_PASSWORD already has this)
+#                 scope on ${GITEA_OWNER:-jc-capital}/inboxos (the
+#                 token the board used to set IMAP_PASSWORD
+#                 already has this)
 # Optional:
 #   GITEA_URL     default: https://git.cloudinit.dev
-#   GITEA_OWNER   default: cto-inboxos
+#   GITEA_OWNER   default: jc-capital
 #   GITEA_REPO    default: inboxos
 #
 # The script is idempotent: re-running updates the same secrets.
@@ -25,7 +26,7 @@
 set -euo pipefail
 
 GITEA_URL="${GITEA_URL:-https://git.cloudinit.dev}"
-GITEA_OWNER="${GITEA_OWNER:-cto-inboxos}"
+GITEA_OWNER="${GITEA_OWNER:-jc-capital}"
 GITEA_REPO="${GITEA_REPO:-inboxos}"
 GITEA_TOKEN="${GITEA_TOKEN:?GITEA_TOKEN is required - the board owner-scoped token}"