refactor github stuff into its own play

GitHub access needs to happen at different stages for server and agent.