CRE CLI version 1.21.0 is now available. Using --unsigned or --changeset with --secrets-auth=browser or a private registry now produces a clear upfront error instead of a confusing failure mid-operation.
Update your CLI by running cre update when prompted, or follow the CLI Installation guide for fresh installations.