ci: fix requirements.txt and gitleaks scan mode

- Replace README-overwritten requirements.txt with clean dependency list.
- Run gitleaks in --no-git mode because Forgejo runner checkout volume lacks .git.

.forgejo/workflows/ci.yml

@@ -127,7 +127,7 @@ jobs:
         run: |
           apt-get update && apt-get install -y --no-install-recommends wget git ca-certificates && rm -rf /var/lib/apt/lists/*
           wget -qO- https://github.com/gitleaks/gitleaks/releases/download/v8.24.0/gitleaks_8.24.0_linux_x64.tar.gz | tar -xz -C /usr/local/bin gitleaks
-          gitleaks detect --source . --redact --no-banner
+          gitleaks detect --source . --redact --no-banner --no-git
 
   security:
     name: Security audit (bandit)

=0.14.0

@@ -0,0 +1 @@
+

requirements.txt

@@ -1,7 +1,7 @@
-[//]: # (SPDX-License-Identifier: MIT
-[//]: # (Copyright (c) 2026 Rug Munch Media LLC)
-# Pry - Free web scraping + automation API
-# Better than Firecrawl, self-hosted, no API keys needed
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2026 Rug Munch Media LLC
+# Part of Pry — https://git.rugmunch.io/RugMunchMedia/pryscraper
+# Generated from pyproject.toml; do not edit manually.
 
 fastapi>=0.115.0
 uvicorn[standard]>=0.32.0
@@ -11,6 +11,7 @@ lxml>=5.3.0
 httpx>=0.28.0
 markdownify>=0.14.0
 pydantic>=2.0.0
+pydantic-settings>=2.0.0
 playwright>=1.50.0
 redis>=5.0.0
 pypdf>=5.0.0
@@ -18,4 +19,10 @@ python-docx>=1.1.0
 tiktoken>=0.8.0
 pillow>=10.0.0
 click>=8.0.0
-httpx>=0.28.0
+pyyaml>=6.0
+pandas>=2.0.0
+anyio>=4.0.0
+croniter>=2.0.0
+structlog>=24.0.0
+sqlalchemy>=2.0.0
+aiosqlite>=0.19.0