feat(cicd): Gitea Mirror B2 備份策略

- 新增 Gitea remote (192.168.0.110:3001/wooo/awoooi)
- CD 成功後自動 mirror to Gitea
- 新增 GITEA_MIRROR_TOKEN GitHub Secret
- 更新 LOGBOOK 紀錄

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.github/workflows/cd.yaml

@@ -347,11 +347,12 @@ jobs:
           else
             echo "🔄 更新 awoooi-secrets..."
             # 使用 patch 更新，確保關鍵配置永遠是最新的
-            # 2026-03-29 ogt: ADR-036 新增 NVIDIA_API_KEY, ADR-037 新增 SENTRY_AUTH_TOKEN
+            # 2026-03-29 ogt: ADR-036 NVIDIA + GEMINI + SENTRY secrets
             kubectl patch secret awoooi-secrets -n awoooi-prod --type='merge' -p="{
               \"stringData\": {
                 \"OPENCLAW_TG_BOT_TOKEN\": \"${{ secrets.OPENCLAW_TG_BOT_TOKEN }}\",
                 \"OPENCLAW_TG_CHAT_ID\": \"${{ secrets.OPENCLAW_TG_CHAT_ID }}\",
+                \"GEMINI_API_KEY\": \"${{ secrets.GEMINI_API_KEY }}\",
                 \"NVIDIA_API_KEY\": \"${{ secrets.NVIDIA_API_KEY }}\",
                 \"SENTRY_AUTH_TOKEN\": \"${{ secrets.SENTRY_AUTH_TOKEN }}\"
               }
@@ -589,3 +590,14 @@ jobs:
             -d chat_id="${{ secrets.OPENCLAW_TG_CHAT_ID }}" \
             -d text="${MSG}" \
             -d parse_mode="Markdown" || true
+
+      # =======================================================================
+      # 2026-03-29 ogt: Gitea Mirror (B2 備份策略)
+      # 🔴 鐵律: GitHub 是主倉，Gitea 只讀備份 (無 CI)
+      # =======================================================================
+      - name: "Mirror to Gitea (B2 Backup)"
+        if: success()
+        run: |
+          echo "🪞 Mirror to Gitea..."
+          git remote add gitea "http://wooo:${{ secrets.GITEA_MIRROR_TOKEN }}@192.168.0.110:3001/wooo/awoooi.git" || true
+          git push gitea main --force || echo "⚠️ Gitea mirror failed (non-blocking)"