Cap attachment reads and uploads at the request token's grant
Adds credentialCoversRepo for identity-based access; attachments use the issues/pulls/contents areas and token uploads need issue or pull request writes on a covered repository. Assisted-by: Crush
2 files changed+54−16
Rendering diff…