In the demo, you don't need the user to generate and paste a GitHub API key, because you can do that after getting access via OAuth. Will that be possible for all other taps, e.g. SendGrid, Zendesk, Close.com?
That's correct. We did that with GitHub as a short example for HN, but most sources are configured via OAuth (as long as they support it) – including the ones you mentioned.