ci: remove docker/** from smoke-init path trigger

The smoke-init pipeline tests `disinto init` against a Forgejo
instance — it does not build or use the agents Docker image.
Changes under docker/ should not trigger this workflow.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.woodpecker/smoke-init.yml

@@ -14,7 +14,6 @@ when:
       - "lib/load-project.sh"
       - "tests/smoke-init.sh"
       - ".woodpecker/smoke-init.yml"
-      - "docker/**"
   - event: push
     branch: main
     path:
@@ -22,7 +21,6 @@ when:
       - "lib/load-project.sh"
       - "tests/smoke-init.sh"
       - ".woodpecker/smoke-init.yml"
-      - "docker/**"
 
 steps:
   - name: smoke-init

docker/agents/Dockerfile

@@ -1,16 +1,12 @@
 FROM debian:bookworm-slim
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    bash curl git jq tmux cron python3 python3-pip openssh-client ca-certificates \
+    bash curl git jq tmux cron python3 python3-pip openssh-client ca-certificates age \
     && pip3 install --break-system-packages networkx \
+    && curl -sL https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.linux.amd64 \
+       -o /usr/local/bin/sops && chmod +x /usr/local/bin/sops \
     && rm -rf /var/lib/apt/lists/*
 
-# tea CLI — official Gitea/Forgejo CLI for issue/label/comment operations
-# Checksum from https://dl.gitea.com/tea/0.9.2/tea-0.9.2-linux-amd64.sha256
-RUN curl -sL https://dl.gitea.com/tea/0.9.2/tea-0.9.2-linux-amd64 -o /usr/local/bin/tea \
-    && echo "be10cdf9a619e3c0f121df874960ed19b53e62d1c7036cf60313a28b5227d54d  /usr/local/bin/tea" | sha256sum -c - \
-    && chmod +x /usr/local/bin/tea
-
 # Claude CLI is mounted from the host via docker-compose volume.
 # No internet access to cli.anthropic.com required at build time.