API: Allow write:issue token scope for pull request reviews #36873
Description
The pull request reviews API (POST /repos/{owner}/{repo}/pulls/{number}/reviews) used to create inline review comments currently requires write:repository token scope. This is overly broad for integrations that only need to post reviews (e.g. code review bots).
write:issue would be a more appropriate scope since reviews are conceptually comments on pull requests, similar to issue comments which work with write:issue.
This would allow review bots to operate with minimal permissions instead of having full repository write access (push, delete branches, manage settings, etc.).