feat: add gitea agentic runtime control plane

tests/fixtures/gitea/comment_event.json

@@ -0,0 +1,12 @@
+{
+  "action": "created",
+  "comment": {
+    "body": "@devops-agent please process issue 48"
+  },
+  "issue": {
+    "number": 48
+  },
+  "repository": {
+    "full_name": "Fun_MD/devops-skills"
+  }
+}

tests/fixtures/gitea/issue.json

@@ -0,0 +1,6 @@
+{
+  "number": 48,
+  "title": "Fix issue delivery flow",
+  "body": "The agent should post evidence back to the issue.",
+  "state": "open"
+}

tests/fixtures/specs/invalid_missing_provider.md

@@ -0,0 +1,4 @@
+---
+name: invalid-workflow
+---
+# Invalid

tests/fixtures/specs/invalid_path_scope.md

@@ -0,0 +1,17 @@
+---
+name: invalid-path-scope
+provider: gitea
+on:
+  issue_comment:
+    commands: ["@devops-agent"]
+permissions:
+  issues: write
+safe_outputs:
+  add_comment:
+    max: 1
+policy:
+  path_scope: "engine/devops_agent/"
+---
+# Invalid
+
+The path scope must be a list of path prefixes.

tests/fixtures/specs/no_safe_outputs_for_write.md

@@ -0,0 +1,12 @@
+---
+name: invalid-write-without-safe-output
+provider: gitea
+on:
+  issue_comment:
+    commands: ["@devops-agent"]
+permissions:
+  issues: write
+---
+# Invalid
+
+Write permission is declared, but no safe output exists.

tests/fixtures/specs/valid_workflow.md

@@ -0,0 +1,17 @@
+---
+name: issue-delivery
+provider: gitea
+on:
+  issue_comment:
+    commands: ["@devops-agent"]
+permissions:
+  issues: write
+safe_outputs:
+  add_comment:
+    max: 2
+plan:
+  required: true
+---
+# Issue Delivery
+
+Read the selected issue and post evidence.