Apple's ASC API doesn't expose App Group registration cleanly, and the
keychain access group on its own (`$(AppIdentifierPrefix)<bundleId>`)
already gives the share extension and container app a shared store for
the base URL + token. The repo cache moves to per-process UserDefaults —
the extension fetches/caches it on first share if empty.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Claude
0a835f6be0