Recent
vault
Token is stored in this browser only (localStorage). Use a fine-grained PAT scoped to this one repo, Contents: Read and write, with an expiry date. Anyone with access to this unlocked phone can read it.