feat(forgejo): add forgejo.makeitwork.cloud CNAME

[xnoto]

Add forgejo to cluster_apps_hostnames so the upcoming Forgejo install in kustomize-cluster has a public-facing host. Forgejo authenticates via ArgoCD Dex (OIDC), so no Cloudflare Access app — same shape as Grafana/Headlamp.

[github-actions]

OpenTofu Plan

OpenTofu will perform the following actions:

  # cloudflare_dns_record.cluster_apps["forgejo"] will be created
  + resource "cloudflare_dns_record" "cluster_apps" {
      + content          = "7a3b548e-734f-427c-bd37-b360199f5433.cfargotunnel.com"
      + created_on       = (known after apply)
      + id               = (known after apply)
      + meta             = (known after apply)
      + modified_on      = (known after apply)
      + name             = "forgejo"
      + proxiable        = (known after apply)
      + proxied          = true
      + settings         = (known after apply)
      + tags             = (known after apply)
      + tags_modified_on = (known after apply)
      + ttl              = 1
      + type             = "CNAME"
      + zone_id          = (sensitive value)
    }

Plan: 1 to add, 0 to change, 0 to destroy.