Use one human auth method for every automated workload. This does not address the operational constraint that the solution must work across production and staging.

Use an auth method appropriate to the principal, map identity entities and groups, and issue policies through authenticated tokens. Apply this to the patient scheduling application with controls that are documented, testable, and owned by the right team.

Share a root token with all applications. This would leave the patient scheduling application dependent on manual intervention or excessive privilege.

Store static Vault tokens in source control. This fails the scalable governance requirement for the government agency.