A GitHub OAuth publisher that can write ordinary repository files may still fail exactly
A GitHub OAuth publisher that can write ordinary repository files may still fail exactly when a snapshot first adds or updates .github/workflows/*: the classic OAuth workflow scope is separate from public_repo/repo for workflow-file changes. Preflight changed paths before creatin…