Route new developer tokens to rotation owners before deployment

Your developer personal access tokens arrive untracked, causing expired or leaked credentials and last-minute firefighting before releases. Notify rotation owners and archive token receipts so rotations complete before the next deployment.