The org PACKAGES_TOKEN got HTTP 403 on the release lookup; go.yaml and gradle.yaml already use the job token (contents: write). Do the same here and drop the now-unused PACKAGES_TOKEN secret input. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>