- Dockerfile: the rust-tools stage's cargo binstall RUN now mounts an
optional BuildKit secret (github_token -> GITHUB_TOKEN, required=false),
matching the existing pattern in the sibling go image's Dockerfile. Raises
the GitHub API rate limit from 60 to 5000 req/hr when a token is supplied.
- TODO.AI.md: logged the verified root cause and impact of this session's
full multi-platform push build — GitHub API rate-limiting dropped 14/60
tools on linux/amd64 and 40/60 tools on linux/arm64 during cargo binstall
resolution, because two concurrent platform builds share one unauthenticated
budget. Also logged that the shared build wrapper (/usr/local/bin/buildx,
outside this repo) does not currently pass the secret flag, so this fix
has no effect until the wrapper is updated or the secret is passed
manually — flagged as a decision needed from the user. Separately logged
that mingw-w64-gcc has no arm64 Alpine package (apk "no such package"),
a platform limitation with no in-repo fix, affecting Windows GNU target
linking on the arm64 image variant.
