M0     eb077068deb227b84d791b71f0d738773ad2a0d0
agent  b162bc838092d0011fbc49c3be07d49f50c29365
hotfix 6496969a2f8ae910c87f82b442e6ee1b7b386598
M1     7598e66b903de584c74d787ada4313f6deb70cb7

* 7598e66 (HEAD -> main) docs: record hotfix SHA in HOTFIX.md
* 6496969 hotfix: remove debug bypass token from auth.check_token
| * b162bc8 (agent/refactor-auth) refactor: hmac.compare_digest and extract _digest
|/  
* eb07706 initial: token check with debug bypass
