agent
b38f4760e7
The publish path failed at registry login on every dispatch (runs 18, 20) because it read `secrets.ZEGIT_PACKAGE_TOKEN`, a name that exists nowhere. The package-write token every zegit-zoo image workflow uses is ZEGIT_CI_PACKAGE_TOKEN, held above repository scope, so this repository can read it under that name — no second token, no second copy to rotate.