memory: old claude-bot token (id 15) revoked — worldtree-dev fully self-serve on one token

persistent-memory.md

@@ -298,9 +298,12 @@ _As of 2026-06-20:_
   via basic-auth (`claude-bot:gitea-password`, POST `/users/claude-bot/tokens`); dropped
   mode-600 `~/.claude-bot-token-issues` → worldtree-dev swaps. **Gitea COLLAPSES
   `read:issue` into `write:issue`** (write implies read) so the granted set shows
-  write-only but read IS satisfied (GET issues → 200). Revoke the old
-  write:repository-only token once they confirm swap. Advances the credential-migration
-  directive. ALSO this session: re-staged cb2a79a `policies.yaml` (readonly-admin allow
+  write-only but read IS satisfied (GET issues → 200). Old token (id 15,
+  worldtree-dev-actions-20260620) REVOKED (DELETE 204) after worldtree-dev verified
+  read+write end-to-end via `core.issues` (show/list/comment on #311) → claude-bot now
+  carries ONE consolidated worldtree-dev token (id 16) + arbo-ci (id 14), no stale dups.
+  Advances the credential-migration directive (worldtree-dev fully self-serve: Actions +
+  deploys + issues on one token). ALSO this session: re-staged cb2a79a `policies.yaml` (readonly-admin allow
   rules) to demo+personal (see Current-state ratatoskr entry).
 
 - `[2026-06-20]` **rest-server-ana recovered + backup prevention shipped + worldtree-dev