One token for everything: Add Project uses it to create the repository, and deploys use it to clone any project that has no token of its own. It creates under the token owner's own account only (POST /user/repos has no other target). Stored on the server and never written to a project's .env. Save an empty value to remove it.