migrate

This deployment descriptor configures a bookshop destination to https://httpbin[.]org and enables forwarding authentication tokens to it, creating a potentially serious token disclosure risk if requests use that destination. The external destination appears inconsistent with the declared backend service URL; no direct evidence of execution or token transmission is present in this file. Severity is medium to high pending confirmation of destination use.