Admin credentials cannot live in the git tree
Context
Super-admin access must live only in secrets. A foundation audit found the credential committed in tracked files and history.
What went wrong
The password also acted as a never-expiring session token. No deploy gate blocked the class. Repo was private, but the architecture was still wrong.
What we changed
I rotated the secret, redesigned login to mint a short-lived signed session token, scrubbed tracked files, and added a deploy gate that fails if an admin secret reappears in the tree.
Result
That leak class is closed on the ship path. Old history values are worthless after rotation. New commits cannot reintroduce the credential without failing the gate.