github-token-service Existing auth methods GITHUB_TOKEN Automatically generated on each workflow run Grants User PAT Service Account PAT Requires both M365 and Github licenses Requires password rotation of M365 and Github accounts No enforcement of PAT App auth