From bfbe038ab2ff2210b47cfa72ea8796a283af7c1c Mon Sep 17 00:00:00 2001
From: Haitao Pan <haitaopanhq@gmail.com>
Date: Sun, 28 Jun 2026 16:34:21 +0800
Subject: [PATCH] Release/v1.1.5 (#6)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* ci: backport release/* source validation workflow to release/v1.1.5 (#3)

让现有 release/v1.1.5 分支自身包含门禁 workflow（pull_request_target 用 base 分支版本）。
详见 iac_modules/docs/tldr-github-branch-model.md

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* backport: support customizable AI_WORKSPACE_AUTH_TOKEN in deployment workflow

* ci: support customizable AI_WORKSPACE_AUTH_TOKEN in deployment workflow (#5)

- Add AI_WORKSPACE_AUTH_TOKEN to Vault KV secret reads (provision + deploy jobs)
- Add ai_workspace_auth_token as optional workflow_dispatch input parameter
- Allow runtime override of auth token (input takes precedence over Vault)
- Include TLDR token generation guidance in workflow description
- Wire token through all-in-one bootstrap with precedence: input > Vault

Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>