Happy to go into detail on any part of the implementation the external anchoring queue (persistent wp_options queue with exponential backoff, provider interface so GitHub/GitLab are swappable) was the most interesting architectural problem. The HMAC key handling in wp-config.php vs database storage is also something I'd genuinely welcome scrutiny on