docs: record Gitea publication checks

MEMORY.md

@@ -12,7 +12,8 @@ Scope: facts and traps that cost time to establish. Planned work lives in [ROADM
 - Blender inspection found no packed images or linked libraries in the tracked scenes. The character scene references local MPFB textures and a temporary baked texture, so those paths are not portable to a fresh checkout.
 - The 2026-11-07 publication rewrite removed the approved private documents and bundled skills from all reachable refs; local copies remain ignored. The original history backup at `/tmp/gig-line-private-history-backup-42a29fe2` contains those private files and must not be pushed; `/tmp` may be cleared by the system.
 - `git ls-remote --refs origin` succeeded on 2026-11-07 with no advertised refs; `git ls-remote --exit-code origin HEAD` returned 2 because no HEAD was advertised. This does not verify LFS upload support.
-- Gitleaks 8.28.0 found an Android File Server token in historical `Game/GigLine/Config/DefaultEngine.ini`. The token was removed from reachable history and the unused server disabled; the old private backup still contains it and must not be published.
+- Gitleaks 8.28.0 found an Android File Server token in historical `Game/GigLine/Config/DefaultEngine.ini`. The token was removed from reachable history and the unused server disabled; the old private backup and earlier temporary sanitized clone still contain it and must not be published.
+- The first Gitea push uploaded 26 LFS objects. An independent clone fetched all 26 and `git lfs fsck` passed for the full history; the server also advertised LFS locking support.
 
 ## 2026-11-07 — Unreal Engine 5.8.4
 

ROADMAP.md

@@ -71,15 +71,15 @@ Status detail in [Docs/setup.md](Docs/setup.md); pins in [Docs/toolchain.md](Doc
 - [ ] Fixed daytime lighting and basic ambience.
 - [ ] Geographic attribution display ("© OpenStreetMap contributors" + license link).
 
-### Repository publication - active - 42a29fe2-651a-4483-be7f-6d9040c53053
+### Repository publication
 
 - [x] Remove confirmed private documents and bundled skills from publishable history while preserving local copies; validate all refs and LFS objects. Rewritten 2026-11-07; original history is in a separate private local backup.
-- [x] Scan all reachable Git history with Gitleaks 8.28.0. Removed an Android File Server security token from history and disabled the unused server; the rescan found no leaks.
+- [x] Scan all reachable Git history and the publication changes with Gitleaks 8.28.0. Removed an Android File Server security token from history and disabled the unused server; the rescans found no leaks.
 - [x] Review Unreal asset provenance via the generation/import scripts and inspect all 18 reachable Unreal asset versions for recognizable private-reference paths. No such paths were found; this is not a full binary-content audit.
 - [x] Review OSM source distribution notices: original data retains attribution and licence metadata, and the repository links directly to ODbL 1.0.
 - [ ] Review ODbL obligations for each shipped derivative database or produced work before public release.
-- [-] Validate Gitea LFS upload support during the first authorized push. `origin` was reachable on 2026-11-07 and advertised no refs; LFS upload remains untested.
-- [-] Commit and review the publication preparation changes before pushing.
+- [x] Validate Gitea LFS support. The first push succeeded on 2026-11-07; a separate clone fetched all 26 historical LFS objects and passed integrity checks.
+- [x] Commit and review the publication preparation changes before pushing. Initial publication commit: `101db3f`.
 
 ### Release checks