Use ephemeral docker login config; document Cloudflare bypass via Jenkins extra_hosts.
Jenkins builds from apps.json, pushes to Forgejo registry, and archives Coolify image tags; compose installs all apps on first site creation.