update docs

dsyme · dsyme · commit b4d5106f85be · 2026-02-23T18:37:29.000Z
diff --git a/docs/src/content/docs/reference/auth.mdx b/docs/src/content/docs/reference/auth.mdx
@@ -71,6 +71,8 @@ A reference for all GitHub Actions secrets and tokens used by GitHub Agentic Wor
 
 If using Copilot as your AI engine, you need a GitHub Actions Secret set to a GitHub Personal Access Token (PAT) to authenticate Copilot CLI.
 
+**Setup**:
+
 Create a [fine-grained PAT](https://github.com/settings/personal-access-tokens/new):
 
 1. Select your **user account**, not an organization.
@@ -213,7 +215,7 @@ gh aw secrets set GH_AW_GITHUB_MCP_SERVER_TOKEN --value "YOUR_MCP_PAT"
 
 ### `GH_AW_CI_TRIGGER_TOKEN`
 
-Pull requests and pushes made with `GITHUB_TOKEN` do not trigger `pull_request`, `push`, or `pull_request_target` events. This is a [GitHub Actions security feature](https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow) to prevent recursive workflows.
+Pull requests and pushes made with `GITHUB_TOKEN` do not trigger `pull_request`, `push`, or `pull_request_target` events. This is a GitHub Actions feature to prevent recursive workflows.
 
 See [Triggering CI](/gh-aw/reference/triggering-ci/) for how to configure CI triggers on PRs created by workflows using `
 
