Function get_shasta_vcs_token 

pub async fn get_shasta_vcs_token(
    shasta_token: &str,
    vault_base_url: &str,
    site_name: &str,
) -> Result<String, Error>

Retrieve the Gitea VCS token from Vault.

Reads manta/data/<site_name>/vcs.data.token after exchanging the caller’s CSM bearer for a Vault client token via auth_oidc_jwt. Used by service::session::create_session and SAT-file rendering paths that need to clone a CFS layer’s Gitea repository under the caller’s identity.

Errors

Any error produced by auth_oidc_jwt or get_secret, plus [Error::MissingField] when the K/V secret has no token field.