Oh, #SwissArmyUpload update from yesterday:
Got all the logic for Teahouse authentication done. It's not complicated, but it did force me to straighten out my dependency injection and sort out how Teahouse's ephemeral credentials interact with Handtruck's AWS-orientated credential tools.
(Oh, and I implemented GitHub OIDC handling while I was at it, because hyperfocus.)
Next step is credentials store, because this is an user tool and I don't want to do envvars.
