Rename COPILOT_TOKEN -> AI_API_TOKEN

[kevinbackhouse]

The environment variable was renamed in GitHubSecurityLab/seclab-taskflow-agent#104.

[Copilot]

Pull request overview

This PR renames the environment variable COPILOT_TOKEN to AI_API_TOKEN across the codebase to align with changes made in PR #104. The rename affects fallback authentication logic in MCP server files and Docker/devcontainer configuration.

• Updates four MCP server Python files to use AI_API_TOKEN as the fallback when GITHUB_PERSONAL_ACCESS_TOKEN is not set
• Updates shell scripts to pass the renamed environment variable to Docker containers and check for it in devcontainer setup

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/seclab_taskflows/mcp_servers/local_gh_resources.py	Updates fallback token environment variable from COPILOT_TOKEN to AI_API_TOKEN
src/seclab_taskflows/mcp_servers/gh_file_viewer.py	Updates fallback token environment variable from COPILOT_TOKEN to AI_API_TOKEN
src/seclab_taskflows/mcp_servers/gh_code_scanning.py	Updates fallback token environment variable from COPILOT_TOKEN to AI_API_TOKEN
src/seclab_taskflows/mcp_servers/gh_actions.py	Updates fallback token environment variable from COPILOT_TOKEN to AI_API_TOKEN
src/run_seclab_agent.sh	Updates Docker run command to pass AI_API_TOKEN instead of COPILOT_TOKEN
.devcontainer/post-attach.sh	Updates Codespaces secret validation to check for AI_API_TOKEN instead of COPILOT_TOKEN

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[p-]

@m-y-mo / @kevinbackhouse given the naming I think it would make sense to remove those fallbacks GITHUB_PERSONAL_ACCESS_TOKEN = os.getenv('AI_API_TOKEN') (an AI token could be a PAT, but doesn't have to be)

[kevinbackhouse]

@m-y-mo / @kevinbackhouse given the naming I think it would make sense to remove those fallbacks GITHUB_PERSONAL_ACCESS_TOKEN = os.getenv('AI_API_TOKEN') (an AI token could be a PAT, but doesn't have to be)

I've pushed a commit with this change.