PCD read-only query gateway. This is the ONLY way the cloud environment reaches the company intranet (SIT/PROD DB, Redis, ELK, PSM, JIRA). You do NOT need any DB/JIRA/ELK credentials, .env.shared, or VPN: the gateway on the home VPN VM holds them. Full manual: GET /help with header 'Authorization: Bearer $PCD_GATEWAY_TOKEN' (the token is in your environment variables). Easiest: use the local command `pcd-remote` (or the old scripts oracle_readonly_query.sh / psm_prod_query.sh / ... which now forward here).