Release 2.0.80 (2026-06-02)

Bug fixes

• treat ambient App installation tokens as app mode is_app_mode() only returned True when vergil-tooling held the App private key itself (VRG_APP_ID + VRG_PRIVATE_KEY_PATH or ~/.config/vergil/app.*). The reusable ops workflows mint an installation token upstream via actions/create-github-app-token and pass it in as an ambient GH_TOKEN, so _load_app_config() found nothing and is_app_mode() was False.

That left the v2.0.70 bypass_actors skip dormant in CI: the audit kept the desired bypass_actors in the diff while the App token read actual as [] (App tokens cannot see bypass_actors), producing false NON-COMPLIANT drift on every ops run.

Detect the ambient installation token directly: when no App key is configured, inspect the effective token (GH_TOKEN, then GITHUB_TOKEN, matching gh's precedence) and treat a ghs_ prefix as app mode.