feat: implemented token auth

.env.example

@@ -49,6 +49,17 @@ DNS_REPO_BRANCH=main
 # Git remote name.
 DNS_REPO_REMOTE=origin
 
+# Optional HTTPS token auth for git pull/push (when remote URL is https://...)
+# If GIT_AUTH_TOKEN is set, watcher enables non-interactive GIT_ASKPASS mode.
+# GitHub example:
+#   GIT_AUTH_USERNAME=x-access-token
+#   GIT_AUTH_TOKEN=ghp_xxx
+# GitLab example:
+#   GIT_AUTH_USERNAME=oauth2
+#   GIT_AUTH_TOKEN=glpat-xxx
+GIT_AUTH_USERNAME=x-access-token
+GIT_AUTH_TOKEN=
+
 # Directory inside the repository where dynamic zone files are stored.
 # The watcher will only write to this directory; static zones are left untouched.
 DNS_REPO_DYNAMIC_DIR=zones-dynamic