How to Prevent Cache Poisoning in Nx and Lerna Monorepos

How a shared read/write token exposes your remote cache to poisoning (CVE-2025-36852, CREEP), and how read-only tokens in Cacheiro close the gap.