Update config.js

Add private repos back to default permission scopes