docs(gitea): document internal SSH remote

Record the working internal Gitea SSH remote as ssh://git@10.5.1.6:2222/<owner>/<repo>.git and replace stale HTTPS/gitea.paccoco.com examples for PD/NOMAD operations. Port 2222 is SSH, while the web UI remains on port 3002.

docs/operations/SECRETS_MANAGEMENT.md

@@ -172,7 +172,7 @@ On a fresh PD after reinstalling TrueNAS:
    ```
 4. **Clone the main stacks repo:**
    ```bash
-   git clone git@gitea.paccoco.com:fizzlepoof/truenas-stacks.git /mnt/docker-ssd/docker/compose
+   git clone ssh://git@10.5.1.6:2222/fizzlepoof/truenas-stacks.git /mnt/docker-ssd/docker/compose
    ```
 5. **Redeploy stacks** per `DEPLOYMENT_CHECKLIST.md`
 

docs/operations/STACK_STANDARDS.md

@@ -5,7 +5,10 @@
 
 Remotes:
 - GitHub: `git@github.com:Paccoco/truenas-stacks.git`
-- Gitea: `https://gitea.paccoco.com/fizzlepoof/truenas-stacks.git`
+- Gitea web: `http://10.5.1.6:3002/fizzlepoof/truenas-stacks`
+- Gitea SSH: `ssh://git@10.5.1.6:2222/fizzlepoof/truenas-stacks.git`
+
+Use the internal Gitea SSH remote from PD/NOMAD. Port `2222` is SSH, not HTTP.
 
 ## Stack Layout
 Each production stack lives in a subdirectory of the repo root.
@@ -116,7 +119,7 @@ After changing a healthcheck, must `down` then `up` (not just restart).
 cd /mnt/docker-ssd/docker/compose
 git add .
 git commit -m "description"
-git push   # pushes to both GitHub and Gitea
+git push ssh://git@10.5.1.6:2222/fizzlepoof/truenas-stacks.git main
 ```
 
 All `.env` files are gitignored. Only compose files, `.env.example`, and init scripts are committed.