Implements the shared ace-git provider contract for Forgejo: all `fj` CLI invocation, output parsing, authentication verification, and classified failure handling live behind one normalized evidence boundary. Ad-hoc curl fallbacks are strictly excluded.