OXYGENHUB

Changes up to # 3e868a1f94e1 touching crates/hub/src/oidc.rs · 4

See as swimlanes (independent work side by side)

Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
feat: keyless GCS backups, and TEST (closes #169)
Andy McCall ·
✔ 35fea4237cc9
A job's identity: the hub is an OIDC issuer
Andy McCall ·
✔ d1727c573f30