Sharang ParnerkarandClaude Fable 5
5f59635bf8
CI / Detect Changes (pull_request) Has been cancelled
CI / Deploy Agent (pull_request) Has been cancelled
CI / Deploy Dashboard (pull_request) Has been cancelled
CI / Deploy Docs (pull_request) Has been cancelled
CI / Deploy MCP (pull_request) Has been cancelled
CI / Check (pull_request) Has been cancelled
Gitea PATs can't be scoped to a single repo and the ephemeral Actions token can't clone a private git dependency (verified: "Repository not found" even with Collaborative Owners + the actions/checkout extraheader form). A read-only Deploy Key is per-repo least privilege: load it from the TRAMITON_DEPLOY_KEY secret and let cargo fetch tramiton over SSH (dep URL is already ssh://…:22222). Refs #118. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>