HTB_APP_TOKEN repo secret (used by .github/workflows/refresh-htb-profile.yml). HTB App Tokens expire 1 year after issue; mint a new one at https://app.hackthebox.com/profile/settings → App Tokens, then update the secret in repo Settings → Secrets and variables → Actions.