feat(rag): git-based import sources — BOR_GIT_SOURCES repos cloned (first run, --depth 1) or pulled (--ff-only) into BOR_SOURCES_DIR/<repo>/ then indexed; --source still wins; a failed sync aborts before importing anything

.env.example

@@ -36,6 +36,15 @@ BOR_RRF_K=60                      # Reciprocal Rank Fusion damping constant
 # BOR_IMPORT_EXTENSIONS=md,markdown,txt,yaml,yml,json,py
 # BOR_SUGGESTIONS=["How is my Kubernetes cluster set up?"]   # JSON list of onboarding chips
 
+# --- Import sources (git; phase 28) ---
+# Comma-separated git repo URLs; import_docs clones each (first run) or
+# pulls it (subsequent runs) into BOR_SOURCES_DIR/<repo-name>/ and indexes
+# the result. Empty = no git sources (import_docs falls back to --source /
+# the old ~/Homelab + ~/Deployments defaults). Auth via URL (e.g. an
+# https token) or SSH keys.
+# BOR_GIT_SOURCES=https://github.com/user/homelab.git,https://github.com/user/deployments.git
+# BOR_SOURCES_DIR=~/bor-sources
+
 # --- Admin & sign-in (single-admin password login; BOTH required) ---
 # The app refuses to start while either is empty (names the missing
 # variable(s) — README "Admin & sign-in"). Generate the secret with: