The Vercel deployment authorization script calls the GitHub Status API without authentication.

# Bug report <!-- ⚠️ We receive a lot of bug reports which have already been solved or discussed. If you are looking for help, please try these first: - Docs: https://docs.supabase.com - Discussions: https://github.com/supabase/supabase/discussions - Discord: https://discord.supabase.com Before opening a bug report, please verify the following: --> - [ x ] I confirm this is a bug with Supabase, not with my own application. - [ x ] I confirm I have searched the [Docs](https://docs.supabase.com), GitHub [Discussions](https://github.com/supabase/supabase/discussions), and [Discord](https://discord.supabase.com). ## Describe the bug The Vercel deployment authorization script calls the GitHub Status API without authentication. This causes the script to fail in CI environments due to GitHub rate limiting and prevents it from working with private repositories. Additionally, the script has multiple reliability issues (hard-coded repo/org, no timeout, no retries, and possible crashes when target_url is null) which make CI deployments flaky. ## To Reproduce Run the Vercel authorization script in CI without providing a GITHUB_TOKEN. Steps: 1. Run the script with only these env variables: HEAD_COMMIT_SHA VERCEL_TOKEN 2. Script calls: https://api.github.com/repos/supabase/supabase/statuses/{sha} 3. GitHub API responds with rate limit / unauthenticated request. 4. Deployment authorization fails. ## Expected behavior The script should: 1. Authenticate GitHub API requests using GITHUB_TOKEN 2. Work reliably in CI 3. Support private repositories 4. Not hang indefinitely on network calls 5. Retry temporary API failures 6. Safely skip statuses without target_url 7. Exit with non-zero code when authorization fails ##Actual behavior Current script: 1. Calls GitHub API without authentication 2. Hits rate limits in CI 3. Fails for private repositories 4. May crash if target_url is null 5. Has no timeout or retry logic 6. Always exits successfully even when authorization fails ## Scr…