Keep secrets out of tracked scripts; support git add -f secrets file,
git remote token parsing, and port/firewall checks for one-click install.
Co-authored-by: Cursor <cursoragent@cursor.com>
Merge install/upgrade into nexus-1panel.sh with 1c4g/2c8g/4c16g resource
profiles; preflight Gitea and firewall hints; post-install HTTPS health probe.
Co-authored-by: Cursor <cursoragent@cursor.com>