- publish-deb: keep the token out of the process list (curl -K config
file via mktemp, no JSON round-trip through node argv), mktemp the
response file with trap cleanup, add --max-time to the upload
- build-deb: umask 022 + chmod -R a+rX so the payload is world-readable
even when built with umask 077
- install-apt: only fall back to [trusted=yes] on an actual signature
verification failure; other apt-get update failures stay fatal
- auth logout: warn that a manually supplied token stays active on the
server and point at the web UI revocation page
- repo import-batch: resolve the source token inside the per-item try so
one bad item no longer aborts the whole batch
- auth status: print me.login (the /user response has no username field)
and exit 1 when not authenticated
