If you can read this through
drewlo.shapeshifter.me/_spike, the tokenless path-router
Worker proxied your request to a Pages project — behind Drewlo AD
Zero Trust. That's the whole self-serve-publish mechanic, proven.
P1 spike · tear-down-able · holds no Cloudflare token.