apparently at some point my git updated to break https fetching from my gitweb server; i’d apologize but 0 people have noticed and sent me an email about it so
(the short version is that the cgi service runs as a different user than owns the repository, which git doesn’t allow anymore unless you specifically opt in via a global .gitconfig)