read github token from env (when present)