Automate before manual

Before asking the user to click, install, create a token, configure DNS, or run something in their terminal:

1. Try automation first

• GitHub: gh CLI or PAT from the secrets vault (see below)
• Deploy: scripts in docs/deploy-vps.md, scripts/deploy-*, GitHub Actions API
• SSH: deploy keys documented in the project or secrets vault
• Azure: az login or service principal path documented in the repo

2. Secrets vault (relative paths only)

Never hardcode absolute paths (C:\..., /home/...) in skills, commits, or chat copy.

From the project repo root, the shared vault is: