docs(merise): MLD relational schema diagrams (4 sub-domains)
P1 conception: security-by-design layer (Merise 21 entities, Forgejo CI/CD, hardening)
ci: add Forgejo Actions pipeline + gitleaks secret-scan