CI/CD

Do not run OTP login in CI. Create a CLI token once, store it as a secret, and provide it as EPISMO_TOKEN.

epismo token create --workspace-id <workspace-id>

Then in CI:

export EPISMO_TOKEN="$EPISMO_TOKEN"
epismo pack search --type context --query "release"
epismo track apply --input @plan.json

When EPISMO_TOKEN is set, the saved default workspace is ignored. The token's embedded workspace is authoritative, which keeps CI runs reproducible.