ci / rust (push) Successful in 1m21s
`curl | sh` only works for public repos — gitea hides private repos with a 404 to unauthenticated clients. Lead with downloading `install.sh` via the signed-in web UI (or `git show origin/main:install.sh`) and running it locally. Note that the inner `cargo install --git` still uses whatever git credentials the host already has, and document `MAESTRO_REPO_URL=ssh://...` for SSH-only setups. Refs NAP-225.