Traced credential callers and fallback paths.
Identified regression with token scope for secondary repositories.
Noted credential helper lacks repository identity propagation.
