Push and manage repositories.
Read and push to GitHub repositories through a narrow, audited surface — no broad token in the app.