858f68f9c6
gpg-agent may not have a cached passphrase yet when the top-level setq runs at Emacs startup, so a cold agent makes 'pass' fail silently (stderr redirected) and leaves lichess-token permanently empty for the session. Retry the fetch right before each use instead of only once at startup.