v0.5.18 — bearer token form for pre-minted JWTs
New token-def form for /sf:manual-test auth, for services that expect a pre-minted JWT rather than a grant flow.
Added
- skills/manual-test/scripts/checklist_lib/auth.py — fourth token form
bearer: '<jwt-or-${ENV_VAR}>', resolving a literal token straight to anAuthorization: Bearer <token>header (override the header name withheader:). String fields are still${VAR}-expanded, so the token can be injected from the environment. Fails loudly (RuntimeError) when the value resolves empty, so a missing env var is never sent as an emptyBearerheader. Joins the existingkeycloak_ropc/keycloak-client-credentials/payloadforms.
Full changelog: see CHANGELOG.md