“Charon is the OIDC token broker that ferries CI runs across the auth gap — short-lived GitHub App tokens, no stored secrets. Supporting Charon keeps the broker running for the whole ecosystem.”