skip TLS verify in forgejo migrations

configs/services/forgejo.nix

@@ -32,6 +32,8 @@ in
       service.DISABLE_REGISTRATION = true;
       repository.USE_COMPAT_SSH_URI = true;
       security.LOGIN_REMEMBER_DAYS = 365;
+      # required because go doesn't recognize Let's Encrypt as a valid CA
+      migrations.SKIP_TLS_VERIFY = true;
     };
   };