<?php
/**
 * Key Lair — vendor update-check credentials
 *
 * Normal releases don't need this file at all: the .gitlab-ci.yml pipeline
 * generates a real deploy-credentials.php automatically from the
 * UPDATE_DEPLOY_TOKEN CI/CD variable every time a vX.Y.Z tag is published,
 * and bakes it into the release zip. It's never committed to git either
 * way. Copy this sample to deploy-credentials.php only if you need to
 * build a release zip by hand, outside CI (see the wiki's "Releasing a
 * new version" page).
 *
 * Missing entirely (e.g. a raw git checkout), the Updates page just can't
 * reach the registry — nothing else breaks.
 */

return [
    'gitlab_host' => 'https://gitlab.com',
    'gitlab_project' => 'SecretItemGames/key-lair',

    // Deploy Token scoped to read_package_registry ONLY — see Security
    // Notes in the wiki for why never a token with repository access.
    'deploy_token' => 'CHANGE_ME',
];
