instant-sync: dispatch token invalid — red on every push

[hyperpolymath]

The Instant Sync workflow (.github/workflows/instant-sync.yml) fails on every push to main. The peter-evans/repository-dispatch step targeting hyperpolymath/.git-private-farm errors with:

##[error]Bad credentials - https://docs.github.com/rest

i.e. the FARM_DISPATCH_TOKEN secret is present but invalid (expired/revoked, or lacking access to the private farm repo).

Failing runs (all recent main pushes, 2026-07-06 → 2026-07-10)

• https://github.com/hyperpolymath/statistikles/actions/runs/29115163242
• https://github.com/hyperpolymath/statistikles/actions/runs/29109046914
• https://github.com/hyperpolymath/statistikles/actions/runs/29109024952
• https://github.com/hyperpolymath/statistikles/actions/runs/29101912808
• https://github.com/hyperpolymath/statistikles/actions/runs/29094915709
• https://github.com/hyperpolymath/statistikles/actions/runs/29080384724
• https://github.com/hyperpolymath/statistikles/actions/runs/28858712830
• https://github.com/hyperpolymath/statistikles/actions/runs/28826587507

What is already done

Branch chore/hygiene-security-templates adds a secret-presence gate (first step checks FARM_DISPATCH_TOKEN and the dispatch/confirm steps are step-level conditional on it), which also resolves the Hypatia CSA003 secret_action_without_presence_gate alert. A presence gate cannot detect an invalid token, so once that lands the runs will still be red until the token itself is fixed.

What remains (needs repo admin)

Either:

1. Rotate FARM_DISPATCH_TOKEN with a token that has repo-scoped (or fine-grained contents: write + metadata: read) access to hyperpolymath/.git-private-farm, or
2. Remove/disable instant-sync.yml if the private-farm propagation is no longer used — a permanently red check on every main push erodes CI signal.