code-infra-01
cb77c7d629
ci/woodpecker/pr/ci Pipeline was successful
On a fleet host, load_credentials gitea-mosaicstack / gitea-usc now resolve a git identity's SEAT SLOT (MOSAIC_GIT_IDENTITY with a directory under MOSAIC_BRAIN_HOME/fleet/agents/) as the token source, mirroring get_gitea_token in detect-platform.sh (the #1311 lineage). URL still comes from credentials.json (provider config, not identity). A seat with an empty or missing slot REFUSES (rc 1, identity and slot path named) rather than falling back to the shared service store — the same no-fallback rule the git credential helper and detect-platform enforce; a silent fallback would act as the wrong identity (#1343 family, usc/uconnect#3084 precedent). No identity resolved, or a non-seat identity: the service store, unchanged. Other services untouched (no seat concept to invent). Hermetic suite test-credentials-gitea-seats.sh (sandbox brain + sandbox credentials.json; no real credential read), CI-reachable via test:framework-shell. Six pins: slot-sourced token, seat-miss refusal without fallback (token compared against the service value), no-identity service path, non-seat identity, woodpecker indifference to the identity, pre-set GITEA_TOKEN never overridden. Mutants killed: seat-miss-falls-back (dies at G2), seat-reads-service-store (dies at G1). Known pre-existing (out of scope, unchanged by this PR): this host's credentials.json stores gitea tokens under .gitea.<inst>.default and per-identity keys, while the loader reads .gitea.<inst>.token — the no-identity service path fails identically before and after this change (verified against origin/next's loader). Filed for the wrapper-defect batch rather than widened here.