The layers read NUXT_CACHE_PURGE_TOKEN and strip the purge keys from nuxt-site-config; demo.summercms.io and summercms.io/changelog run the fixed builds with rotated tokens (check-live ok, 0 purge keys live).