Load Jira token from flag or environment

[SebTardif]

Load the Jira API token from --jira-token or JIRA_TOKEN instead of a hardcoded value.

Problem

scripts/process_bugs_info.py is a research helper that talks to Percona Jira. It constructed JIRA(..., token_auth=...) with a token baked into the source. Anyone with a clone of this repo can read that value from current main and from git history.

Private vulnerability reporting is not enabled on this repository, so this change is a public cleanup. Please rotate the old Jira token even if the script is unused.

Change

• Resolve the token from --jira-token or the JIRA_TOKEN environment variable.
• Exit with a clear error if neither is set.
• Move PyGithub and jira imports under if __name__ == "__main__" so the helper can be imported in tests.

The token value is not repeated here.

Validation

pytest acto/utils/test_process_bugs_info.py

• Fails on unfixed source (token_auth='...' still present).
• Passes after the change: no quoted token_auth literal; CLI wins over env; missing token raises SystemExit.

Origin

The hardcoded token_auth has been in bdaf5662 (2023-02-03, Tyler Gu) and later commits.