CLOUD_CONFIG_FILE defaulted to a path relative to the working directory, so the enrolment — this installation's credential and the portal key it pinned — sat inside the container and was lost on every rebuild, silently detaching a connected installation. It belongs beside the OAuth key and the flow secrets, for exactly the same reason. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XtBzdDyLsmDaF1W7DLYtYM