Without [actions] ENABLED = true in forgejo's config, the GET /api/v1/admin/runners/registration-token endpoint returns "runner registration token not found" regardless of token scopes, causing hive-ci-register.service to fail on first boot.