Expand Oauth scope to "repos".

Although we don't need "repo" access, this allows us to see non-publicized memberships, as well as team designation.

See https://github.com/benbalter/jekyll-auth/pull/4 for further discussion.

Props @sankage for much of the legwork.