[Security] Rotate Docker Hub PAT — 2026-09-01

[github-actions]

Monthly Docker Hub token rotation

This issue is created automatically on the 1st of each month.

Steps

1. Sign in to Docker Hub → Account Settings → Personal access tokens
2. Generate a new token: Read + Write scope, 90-day expiration
3. Copy the token (shown once)
4. Update the GitHub secret:
   export DOCKERHUB_TOKEN="..." && ./bin/gh-secrets-setup.sh
5. Revoke the old token in Docker Hub
6. Close this issue