### Fixed

- `blocker:unrequested` is judged on this forge again. The head-commit date was
  read from `repos/{o}/{r}/commits/{sha}`, which Forgejo answers **404** — so
  every sweep degraded and left the blocker unjudged (#209).

- `forge_commit_at` is a verb on both backends: GitHub serves a single commit at
  the bare path with the date nested, Forgejo at `git/commits/{sha}` with it
  under `.created`. The caller asks for one timestamp and knows neither shape
  (#209).

### Added

- `test/forge-backends.test.sh` pins each backend's path **and** field, because
  a stubbed `forge_api` cannot catch a wrong path — which is how this shipped
  and why a live sweep was what found it (#209).