Filed as part of an authorized GitHub bug bounty security test (installation-token scope probe). Please ignore or close. Sorry for the noise.