docs(agents): document dual-remote mirroring for SDK distribution

AGENTS.md

@@ -24,6 +24,11 @@ Management (IAM) fabric and WebAuthn Passkey authority.
    server-side (`deleteCookie` across host and wildcard domains).
 3. **Quality Gates:** Every PR must pass `deno fmt`, `deno task lint`,
    `deno task check`, and `deno test`.
+4. **Dual Remote & SDK Distribution:** Development is tracked on GitHub (`origin`:
+   `git@github.com:mrteye/auth-yes.git`). All commits and SDK changes must be
+   mirrored to Gitea (`gitea`: `git@git.atyg.org:tylerg/auth-yes.git`) so that
+   external agents (e.g. Jules) and unauthenticated local projects can consume
+   raw SDK modules via `https://git.atyg.org/tylerg/auth-yes/raw/branch/main/sdk/mod.ts`.
 
 ## 3. History & Context Link