Optional bearer token, encrypted using Jenkins Secret and sent only to the configured source. Do not commit tokens to a Jenkinsfile. Pipeline redeclaration can replace UI-managed settings.