Create a classic token with the repo scope, then Configure SSO → Authorize it for your organization. The token is kept in this browser's local storage and only ever sent to api.github.com — this site has no server.