PAT for KF_GITHUB_TOKEN permissions

[robwilkerson]

I see that, in order to scan a GH repo, we need to create a PAT, but I haven't found anything that indicates what level of permissions are required. I'd like to limit this as much as possible, so if you have guidance around the most minimal level of access required to effectively run the scans, that would be really helpful to know. Thanks!