Grants access to manage repos, webhooks, and organizations
Sign CLAs only — no additional permissions requested