Close #5 Schedule only authorized teams

- remove deprecated hooks in GitHub IP range
- requires new scope read:org
- owner of auth token may be part of the team
  if not admin for the whole organization