sudo: Access is on, and everyone at g1t.sh is staff
The Access app for sudo.g1t.sh has its g1t staff policy (the owner, and emails at g1t.sh), and the worker checks tokens against its AUD tag and team domain. STAFF_EMAILS takes @domain entries, matched on the whole domain, so a lookalike such as xg1t.sh is not staff.
No changes
This commit changes no files.