ci(docs): soften ClawHub docs dispatch auth failures

Treat OpenClaw docs sync dispatch credentials as best-effort: token retries still dispatch on 204, missing credentials warn and skip, auth rejection warns with token-rotation guidance, and unexpected HTTP/network failures stay red.\n\nEvidence: git diff --check; YAML parse; extracted run script bash -n; prior PR CI green before rebase, rebase rerun pending.

.github/workflows/openclaw-docs-sync-dispatch.yml

@@ -24,34 +24,74 @@ jobs:
           set -euo pipefail
 
           if [ -z "${LEGACY_TOKEN:-}" ] && [ -z "${OPENCLAW_GH_TOKEN:-}" ]; then
-            echo "::error::OPENCLAW_DOCS_SYNC_TOKEN or OPENCLAW_GH_TOKEN"
-            echo "::error::is required to dispatch docs sync."
-            echo "::error::to dispatch openclaw/openclaw docs sync."
-            exit 1
+            echo "::warning::Skipping OpenClaw docs sync dispatch because no cross-repo token is configured."
+            exit 0
           fi
 
           dispatch_url="https://api.github.com/repos/openclaw/openclaw"
           dispatch_url+="/actions/workflows/docs-sync-publish.yml/dispatches"
 
           dispatch_with_token() {
-            local token="$1"
-            curl --fail-with-body --silent --show-error \
+            local label="$1"
+            local token="$2"
+            local response_body
+            local http_status
+
+            response_body="$(mktemp)"
+            http_status="$(curl --silent --show-error \
+              --output "${response_body}" \
+              --write-out "%{http_code}" \
               --request POST \
               --header "Authorization: Bearer ${token}" \
               --header "Accept: application/vnd.github+json" \
               --header "X-GitHub-Api-Version: 2022-11-28" \
               "${dispatch_url}" \
-              --data '{"ref":"main"}'
+              --data '{"ref":"main"}' || printf '000')"
+
+            if [ "${http_status}" = "204" ]; then
+              echo "OpenClaw docs sync dispatch accepted with ${label}."
+              return 0
+            fi
+
+            if [ "${http_status}" = "401" ] || [ "${http_status}" = "403" ]; then
+              echo "::warning::OpenClaw docs sync dispatch ${label} credential was rejected with HTTP ${http_status}."
+              cat "${response_body}"
+              return 2
+            fi
+
+            cat "${response_body}"
+            echo "::error::OpenClaw docs sync dispatch failed with ${label} credential, HTTP ${http_status}."
+            return 1
           }
 
-          if dispatch_with_token "${OPENCLAW_GH_TOKEN:-}"; then
+          auth_rejected=false
+
+          if [ -n "${OPENCLAW_GH_TOKEN:-}" ]; then
+            if dispatch_with_token "OPENCLAW_GH_TOKEN" "${OPENCLAW_GH_TOKEN}"; then
+              exit 0
+            fi
+            status="$?"
+            if [ "${status}" != "2" ]; then
+              exit "${status}"
+            fi
+            auth_rejected=true
+          fi
+
+          if [ -n "${LEGACY_TOKEN:-}" ]; then
+            if dispatch_with_token "OPENCLAW_DOCS_SYNC_TOKEN" "${LEGACY_TOKEN}"; then
+              exit 0
+            fi
+            status="$?"
+            if [ "${status}" != "2" ]; then
+              exit "${status}"
+            fi
+            auth_rejected=true
+          fi
+
+          if [ "${auth_rejected}" = "true" ]; then
+            echo "::warning::All configured OpenClaw docs sync credentials were rejected."
+            echo "::warning::Refresh OPENCLAW_GH_TOKEN or OPENCLAW_DOCS_SYNC_TOKEN to restore automatic docs sync."
             exit 0
           fi
 
-          if dispatch_with_token "${LEGACY_TOKEN:-}"; then
-            exit 0
-          fi
-
-          echo "::error::Both docs-sync credentials were rejected."
-          echo "::error::Rotate one of the repository secrets."
-          exit 1
+          echo "::warning::Skipping OpenClaw docs sync dispatch because no non-empty credential was available."