feat: add CI status indicator and favicon

- Add CI status badge in header (auto-syncs from Forgejo)
- Add rock-svg-icon.svg as favicon for Chrome
- Add SOPS encrypted secrets for Forgejo token
- Add decrypt script for local dev

scripts/decrypt-secrets.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# Decrypt SOPS secrets to .env.local for local development
+# Usage: ./scripts/decrypt-secrets.sh
+
+set -e
+
+SOPS_AGE_KEY_FILE="${SOPS_AGE_KEY_FILE:-$HOME/.sops/key.txt}"
+
+if [ ! -f "$SOPS_AGE_KEY_FILE" ]; then
+  echo "Error: Age key not found at $SOPS_AGE_KEY_FILE"
+  exit 1
+fi
+
+if [ ! -f "secrets.enc.yaml" ]; then
+  echo "Error: secrets.enc.yaml not found"
+  exit 1
+fi
+
+echo "Decrypting secrets..."
+SOPS_AGE_KEY_FILE="$SOPS_AGE_KEY_FILE" sops --decrypt secrets.enc.yaml | \
+  sed 's/: /=/' > .env.local
+
+echo "Created .env.local"