Giving yolo RO access to `gh`

[asmacdo]

I (usually) dont want yolo to be able to push, or update comments etc without my approval (its running as me afterall).

I'd like to be able to let it read but not write. Currently this is an annoying limititation, rather than using gh it will directly fetch html and parse it. This is enough to get the job done, but probably bloats context and reduces effectiveness.

What I'd really like is something on the github side, ie an "agent account" where I can specify what it has permission for. Even different permissions for the agent depending on the project its operating in. So step 0 is to see what patterns already exist for this.

[yarikoptic]

well, that's where if needed I just set token in some file I tell claude to source in that session with GH_TOKEN and "call it done"

[yarikoptic]

so -- I think it is just a matter of documentation. Labeling as such