Block a user
WIP: init reads its configuration from the repository root, and says so when it cannot
Clone the watched repository from Gitea by default
WIP: Clone the watched repository from Gitea by default
WIP: Deflake the maxConcurrent-1 BuildExecutor test
the sandbox config section is werkdock, not bwrap