A private package restore works on push events but fails on pull_request

The same install command behaves differently across events because the token source disappears in PR context while the package manager continues to request private scopes.