the solution to both of these is the same thing. vps with accounts for all the services specific to the agent (github and whatever else)