71c993e4cd
Gitea OIDC access_tokens only carry OIDC scopes and cannot call the Gitea REST API. Fall back to GITEA_TOKEN (service PAT) for actual tool execution when configured, while OIDC still handles user identity. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>