Add resource owner guidance to GH_AW_AGENT_TOKEN documentation

[Copilot]

The GH_AW_AGENT_TOKEN documentation listed required permissions but omitted resource owner requirements, which vary based on repository ownership and cause authentication failures when misconfigured.

Changes

• Restructured setup section into user-owned vs organization-owned repository flows
• Added resource owner specifications:
  • User-owned repos: Resource owner = user account
  • Organization-owned repos: Resource owner = organization
• Added explanatory note clarifying that token resource owner must match repository ownership

This aligns the GH_AW_AGENT_TOKEN documentation with the existing pattern established in the ProjectOps token section.

Configuration Example

For an organization-owned repository:

# Create fine-grained PAT with:
# - Resource owner: your-org (must match repo owner)
# - Repository access: Select specific repos
# - Repository permissions:
#   - Actions: Write
#   - Contents: Write
#   - Issues: Write
#   - Pull requests: Write

gh aw secrets set GH_AW_AGENT_TOKEN --value "YOUR_AGENT_PAT"

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• telemetry.astro.build
  • Triggering command: /opt/hostedtoolcache/node/24.12.0/x64/bin/node node /home/REDACTED/work/gh-aw/gh-aw/docs/node_modules/.bin/astro build (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Improve section on GH_AW_AGENT_TOKEN. The permissions are correct, but it is missing a section on who the resource owner should be so that it works correctly based on who owns the repo (see section in ProjectOps) and write something comparable here.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.