Adds a mirror-branch workflow that copies main to a `codeberg` branch excluding .forgejo/ and prds/ directories. Configure Forgejo push mirror on this branch to sync a clean copy to Codeberg. Also picks up updated allowed_tools from kcl-ci (adds bunx/npx patterns). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>