[Copilot]

The cached-revision job failed when GitLab rejected the upstream ls-remote request and Git attempted an unavailable username prompt.

• Authentication: Use GitLab’s oauth2 username with GITLAB_TOKEN for revision lookup, source fetch, and private-module requests; remove the GITLAB_USER requirement.
• Documentation: Update the workflow requirements to specify a read_repository token.

auth=$(printf 'oauth2:%s' "${GITLAB_TOKEN}" | base64 -w0)

[Copilot]

🟢 Approval recommended

No active review issues are reported for the token-only GitLab authentication update.

No open issues 🎉

What changed in this PR

Updates the DevPanel CLI updater to authenticate GitLab requests with the fixed oauth2 username and GITLAB_TOKEN, removing its dependency on GITLAB_USER.

Changes:

• Applies the same authentication to revision lookup, source fetching, and private-module Git requests.
• Updates setup documentation to require only a token with read_repository access.

File	Description
TODO.md	Updates authentication requirements and records the fix’s checklist.
README.md	Documents token-only setup using the oauth2 username.
AGENTS.md	Aligns workflow guidance with the revised authentication requirements.
.github/​workflows/​update-devpanel-cli.yml	Uses oauth2 throughout and removes GITLAB_USER configuration and validation.

_{Review effort: Balanced}