Summary: Today, publishing any orb version (including dev/alpha) requires a personal API token from an org owner; using a project API token results in AUTHORIZATION_FAILURE, even for dev orbs.[Ticket 167650] This forces teams to expose an owner’s personal token (or a bot owner token) via contexts so non‑owners can publish, which is a security and operational concern.[Non‑owner orb publish] Requested change: Support using project API tokens to publish development (dev/alpha) orb versions, while keeping production SemVer publishing restricted to org owners. Why this matters: Let's non‑owner developers independently publish dev/alpha orbs for testing. Keeps production orb releases under org‑owner control. Avoids sharing owner‑level personal tokens in contexts accessible to non‑owners. Reduces overhead of managing bot owner accounts just for orb publishing.[Ticket 167650] This would provide a clearer security boundary between development and production orb workflows.