Leaked Netlify personal access token — deploy + environment compromise

Netlify PATs grant full API access to the issuing user's teams and sites. Similar blast radius to Vercel tokens.