Collection in Git, environments, protected secrets, auto tokens, and a pipeline that blocks merges when the API breaks