TOKEN_OPS re-minted with write:package (was 403 on package endpoints despite ops
being site admin — token scopes gate admins too). Document package↔repo linking
and the registry auth constraints in the skill.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>