fix(nixos): allow Gitea bootstrap over HTTP

configs/nixos/modules/services/gitea.nix

@@ -58,7 +58,8 @@ in
             REVERSE_PROXY_TRUSTED_PROXIES = "${cfg.reverseProxyAddress}/32";
           };
           service.DISABLE_REGISTRATION = false;
-          session.COOKIE_SECURE = true;
+          # Direct bootstrap access uses HTTP until the public HTTPS route moves.
+          session.COOKIE_SECURE = false;
         };
       };
     })