Merge "Inline SECURE_ALLOWLIST_TOKEN" into main