chore(config+secrets): point gitea at jc-capital; move api token to env (GITEA_TOKEN)

Migration to jc-capital/inboxos and token hygiene.
- gitea.owner: cto-inboxos -> jc-capital (new remote org)
- gitea.api_token_env: '<literal token>' -> 'GITEA_TOKEN' (env var name)
  The token value is no longer committed; operators export GITEA_TOKEN
  in their environment (e.g. via .env loaded by docker-compose or direnv).
- Repo slug, base_url, and all other fields unchanged.

---ci---
project: inboxos
phase: 0
milestone: v1.0
status: specify
---/ci---

.ciagent/config.json

@@ -100,8 +100,8 @@
   },
   "gitea": {
     "base_url": "https://git.cloudinit.dev",
-    "api_token_env": "b8fa72220e350314704a8a28a0e570b418bb4655",
-    "owner": "cto-inboxos",
+    "api_token_env": "GITEA_TOKEN",
+    "owner": "jc-capital",
     "repo": "inboxos"
   }
 }