ado-auth

Authenticate to Azure DevOps (ADO) and diagnose auth failures. This is a verify and troubleshoot skill — the bundled create-backlog.cs already implements both auth methods, so you are not writing new auth code here. You are confirming a token works and the org/project point where the user expects, then unblocking the create/query skills ([[ado-create-work-items]], the orchestrator [[findings-to-ado-backlog]]).

ADO accepts two credential styles. Pick A unless the user has a reason to use a PAT.

Method A — Entra token via Azure CLI (recommended)

Why preferred: no long-lived secret to store, and it rides the user's existing az session. The resource id below is the global Azure DevOps application id (same for every tenant) — it tells Entra "mint a token for Azure DevOps".