feat(sources): admin page to add and remove git sources (TODO.md L4)

.env.example

@@ -40,12 +40,19 @@ BOR_RRF_K=60                      # Reciprocal Rank Fusion damping constant
 # BOR_IMPORT_EXTENSIONS=md,markdown,txt,yaml,yml,json,py
 # BOR_SUGGESTIONS=["How is my Kubernetes cluster set up?"]   # JSON list of onboarding chips
 
-# --- Import sources (git; phase 28) ---
+# --- Import sources (git; phase 28, admin-managed since phase 35) ---
 # Comma-separated git repo URLs; import_docs clones each (first run) or
 # pulls it (subsequent runs) into BOR_SOURCES_DIR/<repo-name>/ and indexes
-# the result. Empty = no git sources (import_docs falls back to --source /
-# the old ~/Homelab + ~/Deployments defaults). Auth via URL (e.g. an
-# https token) or SSH keys.
+# the result. Auth via URL (e.g. an https token) or SSH keys.
+#
+# Phase 35 (owner permission 2026-08-26): the PRIMARY way to manage the
+# list is the admin Git sources page (http://localhost:8000/git-sources.html)
+# — rows stored in Postgres (git_sources table, migration 0006). This
+# variable is the EMPTY-TABLE FALLBACK: it only applies while the admin
+# list is empty; once the page has stored any source, this variable is
+# ignored (the page is the source of truth). Empty table + empty variable
+# = no git sources (import_docs falls back to --source / the old
+# ~/Homelab + ~/Deployments defaults; the UI Sync button fails loudly).
 # BOR_GIT_SOURCES=https://github.com/user/homelab.git,https://github.com/user/deployments.git
 # BOR_SOURCES_DIR=~/bor-sources