All checks were successful
continuous-integration/drone/push Build is passing
Clean-room finding caught by the e2e: DRONE_USER_CREATE had no token: => a fresh-DB rebuild's Drone auto-generates a random bot token, so the committed (sops) bridge_drone_token gets 401 and the bridge can't trigger builds. The original cc-ci only matched because its token was captured out-of-band. Now the bot's machine token == bridge_drone_token deterministically on every rebuild. (Evolves the toplevel again; re-establish byte-identical on cc-ci after the e2e + Adversary re-verifies C1.) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>