DL-371

Tier-2 forge e2e runs the real provider client and App-token mint path against a loopback HTTPS GitHub-shaped stub in podman, with per-run generated keys and no forge credentials or live egress; Linear remains deferred until endpoint and token-URL seams exist

Status: Active (Matt, 2026-09-18)

Record: ../../server/compass-forge-agent-server-e2e/design.md#decision-1-the-boundary-is-a-loopback-https-forge-stub-not-forgefakeprovider