add information about GITHUB_TOKEN permissions