Cloudflare API tokens stored as GitLab CI/CD variables create a federated authorization model: any agent with repo access can deploy infrastructure • without individual credential management • enabling distributed publishing at scale