Add debug logging to pushWithToken for CI troubleshooting

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: theoephraim

packages/bumpy/src/commands/ci.ts

@@ -249,6 +249,7 @@ function pushWithToken(rootDir: string, branch: string, config: BumpyConfig): vo
     // Both must be cleared for our custom token to be used.
     const extraHeaderKey = `http.${server}/.extraheader`;
     const savedHeader = tryRunArgs(['git', 'config', '--local', extraHeaderKey], { cwd: rootDir });
+    log.dim(`  extraheader present: ${!!savedHeader}`);
 
     // Collect includeIf entries that point to credential config files
     // git config --get-regexp outputs keys in lowercase, so match accordingly
@@ -264,14 +265,40 @@ function pushWithToken(rootDir: string, branch: string, config: BumpyConfig): vo
         }
       }
     }
+    log.dim(`  includeIf entries found: ${savedIncludeIfs.length}`);
+    for (const entry of savedIncludeIfs) {
+      log.dim(`    ${entry.key}`);
+    }
+
+    // Dump full git config for debugging
+    const fullConfig = tryRunArgs(['git', 'config', '--local', '--list'], { cwd: rootDir });
+    if (fullConfig) {
+      for (const line of fullConfig.split('\n')) {
+        if (/includeif|extraheader/i.test(line)) {
+          log.dim(`  [git config] ${line}`);
+        }
+      }
+    }
 
     try {
       if (savedHeader) {
         runArgs(['git', 'config', '--local', '--unset-all', extraHeaderKey], { cwd: rootDir });
       }
       for (const entry of savedIncludeIfs) {
+        log.dim(`  Unsetting: ${entry.key}`);
         tryRunArgs(['git', 'config', '--local', '--unset', entry.key], { cwd: rootDir });
       }
+
+      // Verify cleanup
+      const remainingIncludeIf = tryRunArgs(['git', 'config', '--local', '--get-regexp', '^includeif\\.gitdir:'], {
+        cwd: rootDir,
+      });
+      if (remainingIncludeIf) {
+        log.warn(`  includeIf entries still present after cleanup:\n${remainingIncludeIf}`);
+      } else {
+        log.dim('  All includeIf entries cleared');
+      }
+
       runArgs(['git', 'remote', 'set-url', 'origin', authedUrl], { cwd: rootDir });
       try {
         runArgs(['git', 'push', '-u', 'origin', branch, '--force'], { cwd: rootDir });