Implement app deployment improvements

docs/gitea-container-registry.md

@@ -9,8 +9,8 @@ HTTPS.
 Registry-specific Gitea settings are carried in
 `helm/gitea-registry-values.yaml`, a non-secret overlay applied after the SOPS
 values file by `make gitea-deploy`. It explicitly enables packages, permits
-container uploads without an app-level size cap, clears globally disabled repo
-units, and moves `ROOT_URL` to the HTTPS host.
+container and PyPI uploads without an app-level size cap, clears globally
+disabled repo units, and moves `ROOT_URL` to the HTTPS host.
 
 Image names should use the Gitea owner and package path:
 
@@ -60,6 +60,12 @@ kubectl create secret docker-registry gitea-registry \
 
 Reference it from workloads as `imagePullSecrets: [{name: gitea-registry}]`.
 
+## Python Packages
+
+The same Gitea package service is used for Python wheels. See
+`docs/gitea-package-registry.md` for the publish/install recipe and the
+`issue-core` migration notes from `RAILIANCE-WP-0004 I03`.
+
 ## Current Storage Notes
 
 The live Gitea pod mounts `gitea-shared-storage` at `/data`; package blobs land