docs: the registry is private, and the handoff is current again

Installing the Rune failed with

    create container: Error response from daemon:
    No such image: ghcr.io/kristianwind/verdande:latest

which was two things wearing one message. No semver tag had ever been
pushed, so release.yml had never run and the image did not exist. And now
that v0.1.0 is published, the package is private because the repository
is — and an anonymous pull reports that as "no such image" rather than as
a permission error, which sends you looking in the wrong place. The
Docker daemon on the host has to be logged in once, as whichever user
runs it. Said in rune.md, self-hosting.md, the README and the handoff,
because whichever one you are holding is the one that has to say it.

The handoff's seven gaps are down to the ones that need real credentials
and real services: Gmail against an account, Web Push against a push
service, PNG icons for iOS, the AI adapters against a key. Added in their
place are the traps this round cost the most time on — that the embedded
frontend is a copy that npm run build does not touch, that Playwright
re-runs its config in every worker, and that svelte-check is not a gate
in a codebase with no type annotations.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

docs/rune.md

@@ -3,6 +3,34 @@
 verdande ships with a Rune manifest for
 [Yggdrasil Panel](https://github.com/kristianwind/yggdrasil).
 
+## Before you start: the registry is private
+
+The image lives at `ghcr.io/kristianwind/verdande` and the package is **private**,
+so an anonymous pull fails with a message that reads as though the image does not
+exist at all:
+
+```
+create container: Error response from daemon:
+No such image: ghcr.io/kristianwind/verdande:latest
+```
+
+That is a permission error wearing the wrong hat. The Docker daemon **on the
+Yggdrasil host** has to be logged in once:
+
+```bash
+echo "$GHCR_TOKEN" | docker login ghcr.io -u kristianwind --password-stdin
+```
+
+`GHCR_TOKEN` is a GitHub personal access token with the **`read:packages`** scope
+and nothing else. The login is stored in `~/.docker/config.json` for whichever
+user runs the daemon — if Yggdrasil runs as root or through systemd, log in as
+that user, not as yourself.
+
+!!! tip "Or make the package public"
+    Under **Packages → verdande → Package settings → Change visibility**. The
+    repository can stay private; only the built image becomes readable. Then no
+    login is needed anywhere and this section stops applying.
+
 ## Installing
 
 1. **Runes → Carve a rune (upload)** and pick

docs/self-hosting.md

@@ -5,6 +5,16 @@ cache, no queue and no second process.
 
 ## Docker
 
+!!! warning "Log in to the registry first"
+    The package is private, and an anonymous pull fails with `No such image`
+    rather than with a permission error. Once per host:
+
+    ```bash
+    echo "$GHCR_TOKEN" | docker login ghcr.io -u kristianwind --password-stdin
+    ```
+
+    `GHCR_TOKEN` is a GitHub token with the `read:packages` scope.
+
 ```bash
 docker run -d --name verdande \
   --restart unless-stopped \