GitHub
Per-guild GitHub integration. The wizard provisions the Vault rows that any KBVE agent consumes when it needs to read or write against GitHub: an HMAC webhook secret (github_webhook:<guild>) and a PAT (github:<guild>). Steps run top-to-bottom: secret, PAT, and allowlist first, then the webhook install and a smoke-test of the full webhook + backfill path so you know downstream agents can use the credentials.