Repos

Command-driven GitHub repository management. Parse the first token as a command when it matches the table; otherwise map clear intent.

Default secrets path is Pulumi ESC (OIDC + pulumi/esc-action) — not long-lived secrets.* in GitHub unless the user explicitly wants classic repo secrets.

Commands