[everfrustrated]

But frustratingly fine grained scoping doesn't work for repos part of an Organisation! Like, what!

[jakub_g]

You need to choose from a drop-down that the token owner is the organization, not you. Then you can create a token for a repo of the org. Your org must opt-in to beta.