The .auth-token file committed in b8859da contains a live API key. Remove it from git history and add CI publish-image workflow. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
b8859da