feat: repo delete - remove repo, move bare repo to trash

gitctl repo delete <name> removes a repo from all three places it lives,
the inverse of repo create:
- gitolite stanza via remove_stanza (inverse of add_stanza), committed
  and pushed FIRST so gitolite stops serving the repo before its bytes
  move.
- cgit block via the new delete-repo helper verb (remove_repo_block,
  inverse of insert_repo_block), backed up and synced.
- the bare repo is MOVED to TRASH_DIR (/var/lib/gitolite3/trash,
  timestamped) with a .trashinfo breadcrumb, not rm, so it is
  recoverable. A realpath check keeps the move one level under REPO_BASE.

Always confirms; the global -y is deliberately not honored (cmd_delete
never reads a.yes). Idempotent: a piece already gone is skipped.
Partial failure is resumable by re-running, like create. Both inverse
functions are pinned by add/insert-then-remove round-trip self-tests
plus middle/last/missing cases; trash_repo and do_delete_repo run on
temp dirs. Verified live: create then delete round-trips against the
real gitolite.conf, bare repo lands in the trash dir intact.

Helper changed: redeploy gitctl-helper to the server.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

0 files changed, 0 insertions, 0 deletions