How to point Gradle at a private Maven repository: repositories, credentials, plugin repos, and publish

Gradle never reads settings.xml. Wire the GROUP in pluginManagement and dependencyResolutionManagement, push to HOSTED with credentials and maven-publish, and use the 401, 409, and plugin-not-found table.