test runner of the forge, one job per branch
Test runner of the forge: one job per branch on the mirror.
Settings are the defaults of the script, mirrored by the play (roles/frg_ci);
it does not read /etc/hn-forge.conf. Each fetch of the mirror is bounded by
hn-timeout.
The suite of a branch is not run by the account that owns the verdicts:
hn-ci-run.sh runs it as one of two run accounts (doas rules of the play), one
for the jobs of the branches and one for the integration branch and promote,
copies the tree and bounds it. hn-ci.sh takes back the exit status and, as tar
streams written by the account that ran the suite, filtered logs and the keys
of the test cache of a trusted run; it opens nothing the suite owns.

Maintainer: Jean-Gerard Pailloncy <j-g@pailloncy.com>
