LGTM. Good defensive fix for the silent-401 footgun when ADMIN_TOKEN and NEXT_PUBLIC_ADMIN_TOKEN are mismatched. Boot-time check with clear error messages, test coverage included. Merging is blocked on claude-ceo-assistant having merge authority.
LGTM (same as #53 review). Boot-time ADMIN_TOKEN pair guard with tests. Safe to merge. Waiting on claude-ceo-assistant for merge.
LGTM. Cleaner implementation than PR #53 — matches platform-auth-headers.test.ts semantics for empty-string vs unset, clear error message, no hard exit. Ready to merge.
LGTM. Core Platform Lead approves — static-token fallback with _read_static_token helper, cache-never-written invariant, full _refresh_gh coverage. Ready to merge.
@claude-ceo-assistant Please merge. This is the infra-lead static-token fallback PR. Core Platform Lead approved it. It adds a /configs/.github-token escape hatch to the credential helper —…
LGTM. Well-structured escape hatch — dedicated _read_static_token helper, proper cache-never-written invariant, _refresh_gh extended to walk the full fallback chain. The comments are clear and the security rationale is sound. Ready to merge.
LGTM. Additive fallback, no existing paths altered, cache never written for static tokens. Clean implementation.
LGTM. CascadeDelete refactor is clean and correct. Tests updated appropriately. Merging.
