feat(web,ui): per-project forced git provider and settings gating

Adds a per-project forced provider (github|gitlab|gitea) on top of the
per-project API base URL overrides: stored under gitProviders.provider in
projects/<projectId>.json, sanitized server-side, and winning over remote-host
detection both in useGitProvider and in server repo resolution
(parseGitLabRemoteUrl/parseGiteaRemoteUrl accept any host when the provider
is forced). The Projects settings page replaces the three always-visible URL
fields with a provider selector (auto-detect + the three forges) and one URL
override for the active provider. Global provider override fields on the
GitHub/GitLab/Gitea settings tabs now render only once an account is
connected, and Settings search availability matches that gating.

Also fixes the useConfigStore/useDirectoryStore circular-import TDZ in the
bundled chunk via the window-registered store handle and defers the directory
subscription to a microtask; fixes the Gitea PR merge payload (Do carries the
merge-style string enum, not a boolean + MergeMethod); and adds a documented
Gitea client live-test harness (scripts/gitea-live-test.ts + client.d.ts).

packages/web/server/lib/gitea/repo.js

@@ -1,6 +1,6 @@
 import { getRemoteUrl } from '../git/index.js';
 import { getGiteaAuthAccounts, normalizeBaseUrl } from './auth.js';
-import { getEffectiveProviderApiBaseUrl } from '../git-providers/project-config.js';
+import { getEffectiveProviderApiBaseUrl, getProjectProviderFromDirectory } from '../git-providers/project-config.js';
 
 // When no explicit host allowlist is provided, accept any host that matches the
 // base URL of a stored Gitea account. Gitea/Forgejo is self-hosted, so there is
@@ -50,7 +50,7 @@ function acceptedHosts(knownHosts) {
  * When omitted, hosts from stored auth accounts are accepted. `github.com` and
  * `gitlab.com` are never accepted.
  */
-export const parseGiteaRemoteUrl = (raw, knownHosts) => {
+export const parseGiteaRemoteUrl = (raw, knownHosts, options = {}) => {
   if (typeof raw !== 'string') {
     return null;
   }
@@ -85,7 +85,7 @@ export const parseGiteaRemoteUrl = (raw, knownHosts) => {
   if (host === 'github.com' || host === 'gitlab.com') {
     return null;
   }
-  if (!acceptedHosts(knownHosts).has(host)) {
+  if (!options.allowAnyHost && !acceptedHosts(knownHosts).has(host)) {
     return null;
   }
 
@@ -133,8 +133,10 @@ export async function resolveGiteaRepoFromDirectory(directory, remoteName = 'ori
       // ignore a malformed override base URL
     }
   }
+  // A forced gitea provider (per-project override) accepts any remote host.
+  const forcedProvider = getProjectProviderFromDirectory(directory);
   return {
-    repo: parseGiteaRemoteUrl(remoteUrl, knownHosts),
+    repo: parseGiteaRemoteUrl(remoteUrl, knownHosts, { allowAnyHost: forcedProvider === 'gitea' }),
     remoteUrl,
   };
 }