- Enforced the exact Forgejo ceremony source and version across governance records and workflow pins. (#36).