[ppXD]

Summary

• Resolve the git credential immediately before each command that reaches the remote (clone fetch, LFS upload, push, readback, every revise re-push) through a narrow IWorkspaceTokenSource backed by the same resolver and provider-auth layer that provisioned the workspace. A GitLab OAuth access token lives two hours and is revoked the moment any caller refreshes it, so a token captured at run start was dead by the end-of-run push in long runs, or whenever a sibling run refreshed the credential.
• WorkspaceRequest gains additive RepositoryId / TeamId (data only, in Messages). A request without a repository id, or a provider without a token source, keeps the captured token exactly as before.
• A push the remote refuses is retried once with a freshly resolved credential, only when it differs from the refused one. Refused again, or resolved to the same one, it ends as a typed GitCredentialRejectedException (git.credential_rejected, not retried) instead of presenting the same refusal three times against the account.
• The run keeps Succeeded so every caller that reads that status is unchanged. The failure is recorded as PublishFailureCode and PublishError on the run result, in the publish manifest and on the timeline. A run whose acceptance contract finds nothing to grade because of it now fails closed with credential-rejected (infra) instead of no-branch-or-repo.
• The push-retry doc comments in AgentRunExecutor now describe this behaviour: a refused credential is classified by the workspace provider and never retried, while other WorkspaceExceptions still get the bounded blind retry. LocalWorkspaceHandle takes its collaborators as one private HandleDependencies record, so its constructor stays within five parameters.

Test plan

• Unit: LocalGitWorkspaceProviderCredentialTests, RepositoryWorkspaceTokenSourceTests, AgentRunExecutorPushTests, AgentRunExecutorAcceptanceTests, FailureTaxonomyTests (442 passed with the workspace slice)
• Unit: Architecture, AgentRunExecutor and Sandbox suites (560 passed)
• Integration against loopback git/GitLab stubs and Postgres: token expires before the push (red on main, green here), stale-then-fresh credential, refused credential, disconnected credential, long-run publish, resolver (33 passed)
• Non-breaking: a null RepositoryId takes the captured-token path unchanged; no migration; no env toggle; new fields are additive and nullable, so rolling deploy and rollback are safe