REST /stargazers broke this job twice on token permissions: GitHub first
restricted it to collaborators, then refused fine-grained tokens on it
outright. GraphQL serves the same public starredAt data without that gate,
so the built-in Actions token is enough and the secret becomes unnecessary.
Its cursors encode a timestamp rather than an offset, so sampled pages can
no longer be fetched directly and the connection has to be walked. Both
themes now render from one walk to keep that cost paid once.
Co-authored-by: Cursor <cursoragent@cursor.com>
Yu Li
ce134f7987