Azure DevOps PAT with Build (Read & execute) scope
Found in the URL: dev.azure.com/…/_apis/pipelines/4/runs
Click a provider card to switch. Click ⚙ Configure to set credentials — saved to PostgreSQL (durable) + Redis cache. Falls back to .env if no UI value is set.