Update release links for Forgejo

ober

1dd16c43af2fe0576fc060df7b01820832c8c6c0

diff --git a/README.md b/README.md
index 04b9140..446b5b3 100644
--- a/README.md
+++ b/README.md
@@ -172,7 +172,7 @@ one-file static executable. It includes the native browser binary, the
 `libjerboa_browser.so` backend, the browser vault FUSE helper, Qt
 libraries/plugins, `QtWebEngineProcess`, and WebEngine resource files.
 
-SourceHut CI publishes verified Linux tarballs under architecture-specific
+The `git.jerboa.sh` releases page publishes verified Linux tarballs under architecture-specific
 artifact names.
 
 The functional suites run offscreen (`QT_QPA_PLATFORM=offscreen`) and hermetic
diff --git a/artifact-url.txt b/artifact-url.txt
index 10babcb..a435259 100644
--- a/artifact-url.txt
+++ b/artifact-url.txt
@@ -1 +1 @@
-https://s3.sr.ht/builds.sr.ht/artifacts/~lisp/1769869/42d3bf9beebf9a74/jerboa-browser-0.0.1-linux-x86_64.tar.gz
+https://git.jerboa.sh/ober/jerboa-browser/releases/download/v0.0.1/jerboa-browser-0.0.1-linux-x86_64.tar.gz
diff --git a/docs/finding-closure.md b/docs/finding-closure.md
index 6bd901d..218ca6a 100644
--- a/docs/finding-closure.md
+++ b/docs/finding-closure.md
@@ -50,7 +50,7 @@ hashes emitted by `make release-evidence`.
   tools; a checksum downloaded beside an archive is never trusted.
 - The default build uses only that project-local pinned toolchain; sibling and
   ambient PATH tool selection was removed.
-- YubiKey and SourceHut Jerboa source fetches require exact commits and Git tree
+- YubiKey and `git.jerboa.sh` Jerboa source fetches require exact commits and Git tree
   IDs. Existing vendor snapshots carry an exact lock. Default branches cannot
   enter builds (`SUPPLY-01`, `SUPPLY-05`).
 - Ubuntu is pinned by OCI digest and an immutable signed apt snapshot;
diff --git a/final-kimi3.md b/final-kimi3.md
index d544ce0..8534aa0 100644
--- a/final-kimi3.md
+++ b/final-kimi3.md
@@ -28,7 +28,7 @@ pinned toolchain (`JERBOA_VERSION ?= v0.2.4` in the Makefile).
   RAM-only XOR-masked password vault, YubiKey-PIV-encrypted bookmarks,
   encrypted FUSE profile vault, adblock on-by-default.
 - **Tests**: ~200 hermetic offscreen cases across 13 Scheme suites + 4 ctest
-  suites + 2 shell suites, all wired into `make test-all` and SourceHut CI
+  suites + 2 shell suites, all wired into `make test-all` and CI
   (`.build.yml`). Snapshot PNGs committed under `test-artifacts/`.
 - **Assurance pipeline**: `make verify` = tests + `scripts/security-check.sh`
   (greps release sources for `QTWEBENGINE_DISABLE_SANDBOX` / `--no-sandbox`)