deploy-gate — private bundles behind ephemeral tokens