chore/ai-guardrails-centralization

Signed-off-by: Stefan Mogeritsch <stefan.mo.co@gmail.com>

.dockerignore

@@ -193,7 +193,7 @@ secrets/
 # ===================================================================
 TODO*.md
 NOTES*.md
-**/.junie/
+.junie/
 
 # ===================================================================
 # Keep essential files (override exclusions)

.gitea/workflows/desktop-tests.yml

@@ -18,7 +18,7 @@ jobs:
   desktop-tests:
     # Komplett deaktivierbar über Repo-Variable: Settings → Variables → DESKTOP_CI_ENABLED=true
     # Zusätzlich: Für Plan‑B‑Builds überspringen, wenn Commit-Message [planb] enthält
-    if: ${{ vars.DESKTOP_CI_ENABLED == 'true' && !contains(github.event.head_commit.message, '[planb]') }}
+    if: ${{ vars.DESKTOP_CI_ENABLED == 'true' && !contains(gitea.event.head_commit.message, '[planb]') }}
     name: Compose Desktop — Tests (headless) & Build
     runs-on: ubuntu-latest
 

.gitea/workflows/docker-publish.yaml

@@ -1,5 +1,5 @@
 name: Build and Publish Docker Images
-run-name: Build & Publish by @${{ github.actor }}
+run-name: Build & Publish by @${{ gitea.actor }}
 
 on:
   push:
@@ -117,8 +117,8 @@ jobs:
           images: ${{ env.REGISTRY_INTERNAL }}/${{ env.IMAGE_PREFIX }}/${{ matrix.image }}
           tags: |
             type=ref,event=tag
-            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
-            type=sha,format=long,enable=${{ github.ref == 'refs/heads/main' }}
+            type=raw,value=latest,enable=${{ gitea.ref == 'refs/heads/main' }}
+            type=sha,format=long,enable=${{ gitea.ref == 'refs/heads/main' }}
 
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
@@ -132,5 +132,5 @@ jobs:
           provenance: false
           sbom: false
           build-args: |
-            BUILD_DATE=${{ github.event.head_commit.timestamp || 'unknown' }}
-            VERSION=${{ github.sha }}
+            BUILD_DATE=${{ gitea.event.head_commit.timestamp || 'unknown' }}
+            VERSION=${{ gitea.sha }}

.gitea/workflows/feature-build.yml

@@ -39,7 +39,7 @@ jobs:
             chmod +x install-conveyor.sh
             ./install-conveyor.sh
           fi
-          echo "$HOME/.conveyor/bin" >> $GITHUB_PATH
+          echo "$HOME/.conveyor/bin" >> $GITEA_PATH
 
       - name: Windows .msi mit Conveyor bauen
         run: |

.gitea/workflows/pr-guard.yaml

@@ -5,7 +5,7 @@ on:
 jobs:
   no-hardcoded-versions:
     # Für Plan-B-Builds überspringen: Commit-Message enthält [planb]
-    if: ${{ !contains(github.event.head_commit.message, '[planb]') }}
+    if: ${{ !contains(gitea.event.head_commit.message, '[planb]') }}
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.nolik/.aiignore

@@ -0,0 +1,21 @@
+# .aiignore - Verhindert Token-Waste für Nolik
+
+# Abhängigkeiten & Binaries
+build/
+.gradle/
+*.jar
+*.deb
+*.msi
+
+# Sensible Daten (auch lokal!)
+.env
+.env.*
+config/docker/certs/
+*.pem
+*.jks
+postgres-data/
+valkey-data/
+
+# Doku-Builds (Nolik soll die Source-Files in docs/ lesen, nicht die HTML-Exporte)
+build/dokka/
+docs/Neumarkt2026/*.pdf