discovered 2026-09-23
CI bridge sourced via BASH_ENV in the npm publish step; passes NPM_TOKEN to sckit, deletes itself, exits 1. Commit 9b97ec6.