feat:Fix the bootstrap to be deploy key application

k8s/bootstrap/phase5-cutover/root-app-forgejo.yaml

@@ -0,0 +1,39 @@
+# ArgoCD Root App-of-Apps — Forgejo Source (Final State)
+# This replaces the GitHub mirror with Forgejo as the source of truth
+# Apply this AFTER Forgejo is healthy and you've pushed the repo
+#
+# The circle is broken: ArgoCD → Forgejo works because both already exist
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: homelab-root
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: homelab
+  
+  source:
+    repoURL: https://forgejo.riotpiao.com/YOUR-ORG/homelab.git  # ← REPLACE with your Forgejo URL
+    targetRevision: main
+    path: k8s/argocd/apps
+    
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: argocd
+    
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+      allowEmpty: false
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
+    retry:
+      limit: 5
+      backoff:
+        duration: 5s
+        factor: 2
+        maxDuration: 3m