Read delivery tokens from files and check selected paths before release

cmd/releasekit/internal/cli/config.go

@@ -153,8 +153,9 @@ type Settings struct {
 type ValidationSettings struct {
 	// SharedFiles selects committed files relative to the repository root.
 	// Nil uses optional defaults; a non-nil empty slice selects no shared files.
-	SharedFiles []string             `json:"shared_files"`
-	Go          GoValidationSettings `json:"go,omitempty"`
+	SharedFiles    []string             `json:"shared_files"`
+	UntrackedFiles []string             `json:"untracked_files,omitempty"`
+	Go             GoValidationSettings `json:"go,omitempty"`
 	// GoFormat checks the formatting of committed regular Go source files.
 	// Omitted or false disables the check.
 	GoFormat           bool                       `json:"go_format,omitempty"`
@@ -201,6 +202,7 @@ type DeliverySettings struct {
 	Owner      string `json:"owner"`
 	Repository string `json:"repository"`
 	TokenEnv   string `json:"token_env,omitempty"`
+	TokenFile  string `json:"token_file,omitempty"`
 }
 
 // BuildSettings selects the Go application package, artifact name, and targets.