cmc Stdin-only per-repo secrets injected via the runner claim; cron schedules synced from ci.yml with a daemon ticker; build trigger for on-demand runs. Migration 0025.