It had been a while since I looked, but #gitea supports push mirrors with per-repository authentication. 😍

That means you can easily make #GitHub downstream from your main development repo