docs: Gitea SSH port 2222 verified working

WAN port forward confirmed end-to-end. Clone URL:
ssh://git@cortex.dgrzone.com:2222/<user>/<repo>.git

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

documentation/TODO__Agents.md

@@ -13,10 +13,10 @@
 - Model selection: configurable per-request or per-session
 - Auth status check: ping `/api/tags` to confirm reachability
 
-### [Testing] Gitea SSH port 2222
-- pfSense port forward configured but not yet verified end-to-end
-- Test: `ssh -p 2222 git@<external>` from outside WireGuard
-- Document result in this file
+### [Testing] Gitea SSH port 2222 ✅ — 2026-03-29
+- pfSense WAN → 192.168.32.7:2222 port forward confirmed working
+- `ssh -p 2222 git@cortex.dgrzone.com` reaches Gitea (returns "Invalid repository path" — expected, confirms connectivity)
+- Clone/push via SSH: `git clone ssh://git@cortex.dgrzone.com:2222/<user>/<repo>.git`
 
 ---