Keep repository-limited tokens away from owner-wide runners

Registering, listing and removing runners that serve every repository of an owner now needs an all-repositories admin:write token, like the dedicated owner runner routes; a token scoped to one repository only manages that repository's runners.

Assisted-by: Crush

taigrrcommitted 2 days agoparent bcdae50f841c0b524e639fcb21aaed83777a6c734a67d2aBrowse files