cctest-recipe-upstream: step 0 is just the mirror fetch (remote-add only as fallback)

.opencode/skills/cctest-recipe-upstream/SKILL.md

@@ -50,6 +50,25 @@ not the test server — so it can run either way. Probe, then follow that branch
   4. Everything else in the canonical script (origin/dev remote setup, release recommendation,
      emitted next-steps) is identical.
 
+Every time the branch was prepared **here**, remember it exists only on this host — the
+operator's machine must fetch it first. Always emit this **step 0** before the push step
+(anonymous public fetch, no credentials needed):
+
+```
+  # 0. On a machine WITHOUT the branch pre-fetched, get it from the autonomic mirror
+  #    (assumes a local checkout of the recipe that already has the mirror remote;
+  #    its name here is `gitea`):
+  cd <local checkout of the recipe>
+  git fetch gitea +refs/pull/<PR_NUM>/head:refs/heads/<HEAD_REF>
+  git checkout <HEAD_REF>
+```
+
+If the operator's checkout does NOT yet have the mirror remote, emit once before the fetch:
+
+```
+  git remote add gitea https://git.autonomic.zone/recipe-maintainers/<recipe>.git
+```
+
 In both modes the final output is a set of commands for the operator to run on a machine **with
 push access to `git.coopcloud.tech`** — always print them, even when everything local is
 already prepared.

scripts/gen-cctest-skills.py

@@ -78,6 +78,25 @@ not the test server — so it can run either way. Probe, then follow that branch
   4. Everything else in the canonical script (origin/dev remote setup, release recommendation,
      emitted next-steps) is identical.
 
+Every time the branch was prepared **here**, remember it exists only on this host — the
+operator's machine must fetch it first. Always emit this **step 0** before the push step
+(anonymous public fetch, no credentials needed):
+
+```
+  # 0. On a machine WITHOUT the branch pre-fetched, get it from the autonomic mirror
+  #    (assumes a local checkout of the recipe that already has the mirror remote;
+  #    its name here is `gitea`):
+  cd <local checkout of the recipe>
+  git fetch gitea +refs/pull/<PR_NUM>/head:refs/heads/<HEAD_REF>
+  git checkout <HEAD_REF>
+```
+
+If the operator's checkout does NOT yet have the mirror remote, emit once before the fetch:
+
+```
+  git remote add gitea https://git.autonomic.zone/recipe-maintainers/<recipe>.git
+```
+
 In both modes the final output is a set of commands for the operator to run on a machine **with
 push access to `git.coopcloud.tech`** — always print them, even when everything local is
 already prepared.