Main CI deploy job cannot checkout with PAT secret

[dbarlag]

What happened

On pushes to main, the Lint, typecheck, test & build job succeeds, but the dependent Update tokens, verify & deploy job fails in actions/checkout before repository checkout.

The failing workflow config passes secrets.PAT to actions/checkout. The log reports: fatal: could not read Username for https://github.com: terminal prompts disabled.

Evidence

• Failed post-merge run after PR test(overlays): deepen overlay and chrome interaction suites (slice 3/4) #25: https://github.com/norwegianredcross/DesignSystem/actions/runs/29847126151
• The same workflow path is used by the current post-merge run after PR test(contracts): cover static component APIs (slice 4/4) #27: https://github.com/norwegianredcross/DesignSystem/actions/runs/29848123935

Expected behavior

After the quality job passes, the deploy job should check out main, update tokens, rerun regression, and publish the combined docs output.

Suggested investigation

• Verify that the PAT repository secret exists, is not expired, and can read/write this repository.
• Consider whether the built-in GITHUB_TOKEN with explicit contents/pages permissions can replace the personal token for checkout and deployment.
• Keep the token-update commit and Pages deployment permissions least-privileged.

Impact

Merges remain tested, but token refresh and GitHub Pages deployment do not run. The overall main workflow is reported as failed.

Severity

High for publishing operations; not a component-test failure.