In Q4/2025, we will update the octo-sts to add/remove permissions used when users request GH tokens. ### Adding: - Repositorie permissions: `Dependabot alerts` - `read` - currently `no access` ### Removing - none