Surfaced during factory-bootstrap field-test on Win11 laptop.
Phase 4 of /setup-projects-meta retries clone with USER:TOKEN@host
URL on auth-failure, which git persists in .git/config of the
cloned repo. Replace with per-invocation extraheader form:
git -c http.extraheader="Authorization: token $T" clone <url>
Field-test artefact: .factory/L0/install-log.md шаг 11c-1.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>