[verified] Harden Etsy MCP validation and scheduled token refresh

.gitea/workflows/deploy.yml

@@ -166,41 +166,11 @@ jobs:
             exit 1
           fi
 
-      - name: Ensure writable runtime paths
+      - name: Preserve managed production environment
         working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
-        env:
-          RUNTIME_PATH: /tmp/${{ env.PROJECT_NAME }}
         run: |
-          mkdir -p "$RUNTIME_PATH/views" "$RUNTIME_PATH/logs" "$RUNTIME_PATH/cache"
-          chmod 0777 "$RUNTIME_PATH" "$RUNTIME_PATH/views" "$RUNTIME_PATH/logs" "$RUNTIME_PATH/cache"
-
-          if grep -q '^VIEW_COMPILED_PATH=' .env; then
-            sed -i "s|^VIEW_COMPILED_PATH=.*|VIEW_COMPILED_PATH=/tmp/HickLab3D.views|" .env
-          else
-            echo "VIEW_COMPILED_PATH=/tmp/HickLab3D.views" >> .env
-          fi
-
-          if grep -q '^LOG_PATH=' .env; then
-            sed -i "s|^LOG_PATH=.*|LOG_PATH=/tmp/HickLab3D.laravel.log|" .env
-          else
-            echo "LOG_PATH=/tmp/HickLab3D.laravel.log" >> .env
-          fi
-
-          for key_path in \
-            "APP_SERVICES_CACHE=storage/framework/cache/data/services.php" \
-            "APP_PACKAGES_CACHE=storage/framework/cache/data/packages.php" \
-            "APP_CONFIG_CACHE=/tmp/HickLab3D.config.php" \
-            "APP_ROUTES_CACHE=/tmp/HickLab3D.routes.php" \
-            "APP_EVENTS_CACHE=/tmp/HickLab3D.events.php"
-          do
-            key="${key_path%%=*}"
-            value="${key_path#*=}"
-            if grep -q "^${key}=" .env; then
-              sed -i "s|^${key}=.*|${key}=${value}|" .env
-            else
-              echo "${key}=${value}" >> .env
-            fi
-          done
+          # Infisical owns .env. Never rewrite runtime paths or integration settings here.
+          test -f .env
 
       - name: Install production PHP dependencies
         working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}