CI poller variable gate with dedicated app token in getsentry/publish

Trap: deduplicating only a default issue-list page looks sufficient for exact Publish titles, but older duplicate requests can be omitted and compact titles can collide with legacy path titles. Fix: query all relevant open requests before deduplicating. Preserve field-less legacy issue semantics; compact suffix meaning is resolved only from exact workspace membership in the CI-approved checkout, never by mutating an existing issue.