clarify that only the repo and gist scopes are required for the GitHub token