Tweaks, gotchas and other non-obvious Forgejo things

Permissions for pushing packages to organization registry

Forgejo package permissions are owner-scoped, not repository-scoped. This means that access must be configured at organization level.

Official docs are not very clear on what "write access to the org" means but experiments show that the user who wants to publish a package (OCI container, Maven, Nuget, etc) to an organization registry must be a part of an organization team that has a packages: write permission. Repository write permissions are irrelevant in this case.