PAT

Create a granular GitHub PAT with:

• Contents — read/write
• Pull requests — read/write

GitHub may also show Metadata / Meta as a read permission; it is added automatically.

If the project's repos are git submodules of this one, give the token those member repos too, with the same two permissions: member PRs are opened with it (Submodules → Setup).

See Creating a GitHub PAT and GH-PAT-SESSION-LOGIN.md.

This is the PAT gh logs in with for the whole run — see Verify GitHub authentication.