The gitea-admin skill now authenticates with TOKEN_OPS (the ops user's admin token), and TOKEN_OPS is injected into the agent process ONLY when name==ops. No other agent holds an admin credential in its env. This unhooks @ops from AGENT_TOKEN, so AGENT_TOKEN can be narrowed to a non-admin token. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>