fix(run-once): report untrusted artifact authors

[rochecompaan]

Summary

• trust both configured and default Forgejo tea users for deterministic artifact comments
• emit a terminal-only warning when deterministic spec/plan artifacts are skipped for an untrusted author
• strip username-bearing console messages from JSONL run logs

Verification

• node --test src/cli/commands/run-once/console-progress.test.ts src/cli/commands/run-once/progress.test.ts src/cli/commands/run-once/artifact-source-stage.test.ts
• node --test src/workflow/artifacts/published-artifacts.test.ts src/cli/commands/run-once/artifact-source-stage.test.ts src/cli/commands/run-once/artifact-sources.test.ts src/cli/commands/run-once/console-progress.test.ts src/cli/commands/run-once/progress.test.ts src/host/forgejo-tea.test.ts
• npm test
• npm run lint:ts
• npx prettier --check src/cli/commands/run-once/artifact-source-stage.ts src/cli/commands/run-once/artifact-source-stage.test.ts src/cli/commands/run-once/console-progress.ts src/cli/commands/run-once/console-progress.test.ts src/cli/commands/run-once/pipeline.ts src/cli/commands/run-once/progress.ts src/cli/commands/run-once/progress.test.ts src/workflow/artifacts/published-artifacts.ts src/host/forgejo-tea.ts src/host/forgejo-tea.test.ts