Add GCS SA support and HMAC opt-out - #6

Merged

solsson merged 8 commits into

mainfrom

Jul 29, 2026

Commits on Jul 29, 2026

gcs: opt-in per-bucket service accounts (driver 0.2)

solsson
and
claude
committed
gcs: drop schema v0.1, v0.2 is the only published schema version

solsson
and
claude
committed
credentials never outlive their access: revocation lifecycle fixes

solsson
and
claude
committed
gcs: name the SA tombstone, gate unauthenticated IAM behind insecure

solsson
and
claude
committed
gcs: hmac opt-out parameter, serviceAccount empty-string opt-out

solsson
and
claude
committed
bump release pin for the gcs-sa binary

solsson
and
claude
committed
pin the Go toolchain so CI reproduces release digests

solsson
and
claude
committed
block deletion on missing backend only for revocable principals

solsson
and
claude
committed