docs: runner relabeled to fedora (gitea-runner v3.5.0, site-wide); bump rpm-sources template to Fedora 44

docs/architecture.md

@@ -19,7 +19,7 @@ flowchart LR
     end
 
     subgraph runbox["runner VM (on the phyllome Cloudron host)"]
-        r1[act_runner daemon]
+        r1[gitea-runner daemon]
         host[HOST labels: run-on-host jobs<br>mock / livemedia-creator / pykickstart]
         img[CONTAINER labels:<br>docker://git.phyllo.me/devops/fedora-runner-image]
     end
@@ -72,9 +72,10 @@ flowchart LR
 
 - **Self-contained actions**: all `uses:` point at `git.phyllo.me/...` mirrors —
   no third-party action code, no github.com calls.
-- **Runner host**: dedicated VM on the phyllome Cloudron host; `act_runner`
-  runs as unprivileged `act_runner` system user; Docker access for container
-  jobs only.
+- **Runner host**: dedicated VM on the phyllome Cloudron host; `gitea-runner`
+  v3.5.0 runs as unprivileged `act_runner` system user; Docker access for container
+  jobs only. Registered site-wide with label `fedora` (runs-on: fedora); the VM
+  runs Fedora 44.
 - **Secrets**: CI secrets live in Gitea (repo/org) — never in the runner config.
   Registration token is UI-generated and consumed once.
 - **Read-only infra automation**: the `automation` repo's MCP servers scope