repository mirroring (push and pull) #18

import is one-shot; migration is gradual. Push mirrors: after each receive, propagate refs to a configured remote (gitbay stays source of truth while GitHub remains readable for collaborators). Pull mirrors: periodic fetch keeping an upstream copy fresh, marked read-only locally. Credentials stored per mirror server-side (unlike import) — needs careful handling; failure visibility via webhook deliveries-style status.