Why would you need multiple agents and not one agent with multiple repos?
Tasks are a good scope for zero trust permissions