remove global github token env coupling (#373)

thread mcp token into exit cleanup and drop process env mutation from token resolution so token access stays explicit and in-memory.

Co-authored-by: Cursor <cursoragent@cursor.com>

entry

@@ -140387,22 +140387,6 @@ function createOctokit(token) {
 
 // utils/token.ts
 var mcpTokenValue;
-function setEnvironmentVariable(name, value2) {
-  const hadValue = Object.hasOwn(process.env, name);
-  const originalValue = process.env[name];
-  if (typeof value2 === "string") {
-    process.env[name] = value2;
-  } else {
-    delete process.env[name];
-  }
-  return () => {
-    if (hadValue) {
-      process.env[name] = originalValue;
-    } else {
-      delete process.env[name];
-    }
-  };
-}
 function getJobToken() {
   const inputToken = core3.getInput("token");
   if (inputToken) {
@@ -140418,7 +140402,6 @@ async function resolveTokens(params) {
   assert2(!mcpTokenValue, "tokens are already resolved");
   const externalToken = process.env.GH_TOKEN;
   if (externalToken) {
-    const revertGithubToken2 = setEnvironmentVariable("GITHUB_TOKEN", externalToken);
     mcpTokenValue = externalToken;
     if (isGitHubActions) {
       core3.setSecret(externalToken);
@@ -140429,7 +140412,6 @@ async function resolveTokens(params) {
       mcpToken: externalToken,
       async [Symbol.asyncDispose]() {
         mcpTokenValue = void 0;
-        revertGithubToken2();
       }
     };
   }
@@ -140446,7 +140428,6 @@ async function resolveTokens(params) {
     core3.setSecret(mcpToken);
   }
   log.info("\xBB acquired full MCP token");
-  const revertGithubToken = setEnvironmentVariable("GITHUB_TOKEN", mcpToken);
   mcpTokenValue = mcpToken;
   let disposingRef;
   const dispose = async () => {
@@ -140456,7 +140437,6 @@ async function resolveTokens(params) {
     disposingRef = Promise.withResolvers();
     try {
       mcpTokenValue = void 0;
-      revertGithubToken();
       await Promise.all([
         revokeGitHubInstallationToken(gitToken),
         revokeGitHubInstallationToken(mcpToken)