For isolated Artifacts provisioning, I propose a small service that retains the Cloudflare REST token, authorizes each create or fork request, and returns repo-scoped Git credentials. Each agent's service credential would limit which repositories it can request.