Valinor token broker

This is the Valinor OIDC token broker. CI jobs in repos governed by Valinor exchange their GitHub Actions OIDC token here (POST /exchange) for a short-lived, narrowly-scoped Valinor App installation token — no secrets to provision in your repo.

There is nothing to browse; the only consumer is the scaffolded CI workflow.