One pin, two environments
#3882 put the real analytics package back. Production built main and went Ready in two minutes. In the same hour three preview builds died at npm ci with E401, because the registry token is set on Production only, on purpose.
Pick an environment, see the install step
Before and after
| Build | Before this fix | After |
|---|---|---|
| Production (main) | real package, token present | unchanged |
| Preview (any branch) | E401 at npm ci, build dead | no-op stub, build green |
| Non-auth install failure | fatal | still fatal, by design |