This seems like a gh issue as well as Claude abusing it. Why should I be able to get the token for GitHub through this call without further authorization?