---
"@ux-team/tvu-design-system": patch
---

Consumer docs: correct the registry transport and the package-rename scan surface.

`docs/CONSUMER_AUDIT_SETUP.md` and `docs/MIGRATION_TO_V1.md` (both shipped in the tarball) still told consumers the Gitea registry was **plain HTTP with no TLS on `:3001`**, and that CI runners had to be able to egress to port **3001**. Both have been untrue since 2026-07-30: the registry is HTTPS on the standard 443 port behind a real Let's Encrypt certificate, and the `:3001` entry point is an internal hop on that same path — not a parallel endpoint to configure.

Also widened the migration guide's bulk-rename command from `src` alone to `src .github/workflows package.json`, and documented why: a template rename in this repo does **not** propagate to copies already living in consumer repos (measured — a consumer's copy of `templates/upstream-gate-workflow.yml` was still resolving `node_modules/@nancyzeng0210/...` in a `run:` step while every other line matched the current template).

No code, API, or token changes.