chore(ops): refresh ordered p0 readback

scripts/security/gitea-private-inventory-p0-scorecard.py

@@ -103,6 +103,11 @@ def build_scorecard(args: argparse.Namespace) -> dict[str, Any]:
     visibility_scope = str(gitea_inventory.get("visibility_scope", "unknown"))
     accepted_payload_count = as_int(import_acceptance.get("accepted_payload_count"))
     received_attestation_count = as_int(coverage_attestation.get("received_attestation_count"))
+    public_repos = [
+        str(repo.get("gitea_repo", ""))
+        for repo in as_list(gitea_inventory.get("repos"))
+        if isinstance(repo, dict) and repo.get("gitea_repo")
+    ]
 
     blockers: list[str] = []
     if gitea_status != "ok":
@@ -134,6 +139,7 @@ def build_scorecard(args: argparse.Namespace) -> dict[str, Any]:
             "status": gitea_status,
             "visibility_scope": visibility_scope,
             "repo_count": as_int(gitea_inventory.get("repo_count")),
+            "public_repos": public_repos,
             "token_present": bool(gitea_inventory.get("token_present", False)),
             "blocking_reason": str(gitea_inventory.get("blocking_reason", "")),
         },

scripts/security/tests/test_gitea_private_inventory_p0_scorecard.py

@@ -41,7 +41,13 @@ def test_scorecard_preserves_current_gitea_inventory_blocker() -> None:
     assert scorecard["status"] == "blocked_waiting_gitea_authenticated_or_owner_export_inventory"
     assert scorecard["gitea_inventory"]["status"] == "partial"
     assert scorecard["gitea_inventory"]["visibility_scope"] == "public_only"
-    assert scorecard["gitea_inventory"]["repo_count"] == 2
+    assert scorecard["gitea_inventory"]["repo_count"] == 4
+    assert {
+        "wooo/awoooi",
+        "wooo/ewoooc",
+        "wooo/agent-bounty-protocol",
+        "wooo/2026FIFAWorldCup",
+    } <= set(scorecard["gitea_inventory"]["public_repos"])
     assert scorecard["authenticated_import_acceptance"]["accepted_payload_count"] == 0
     assert scorecard["coverage_attestation"]["received_attestation_count"] == 0
     assert "gitea_repo_inventory_status_not_ok" in scorecard["active_blockers"]