Update permissions guidelines and interactions with GH REST API

[CasperWA]

Several things have happened on the side of GH and their security and permissions handling when interacting with the REST API. Specifically, they have introduced fine-grained PATs. Other fine-grained options have sprung up when managing rights and permissions for PRs, branches, CI checks, and more.

Helpful documentation:

• Permissions required for fine-grained personal access tokens
• Managing your personal access tokens