Public Access
Replaces the static SWIFTLY_BEARER_TOKEN env-var lookup with a JIT mint via the Firebase Identity Toolkit signUp endpoint, gated by the firebaseApiKey published in luckysupermarkets.com/config.json. - get_token(): returns cached JWT if exp > now+300s, else mints - mint_anonymous_token(): fetches API key, posts signUp with Origin/Referer headers, validates iss + exp on the returned JWT - SwiftlyAuthMintError surfaces verbatim to ScrapeLog.error_message - Process-local cache only; threading.Lock around mutate Tests: 4 unit tests covering fresh mint, cache hit, near-expiry re-mint, and Firebase non-200. Full suite: 92/92 green. Spec: docs/specs/2026-05-06-swiftly-token-auto-mint.md Wiring into lucky_ca_scraper deferred to AM-2. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>