PAT

Create a granular GitHub PAT with:

• Contents — read/write
• Pull requests — read/write

GitHub may also show Metadata / Meta as a read permission; it is added automatically.

See Creating a GitHub PAT and GH-PAT-SESSION-LOGIN.md.

This is the PAT gh logs in with for the whole run — see Verify GitHub authentication.