Vouch request: deeno35

[deeno35]

What do you want to work on?

I would like to use GitHub App user access tokens with OpenShell's OAuth refresh worker. This will use a refresh token to retrieve short lived tokens, but GH's refresh endpoint fails due to "invalid json" because it returns application/x-www-form-urlencoded without an Accept: application/json header when we POST.

Most servers (Slack, Atlassian and Google, etc) just return json by default, but GH does not.

Other GH auth options considered:

• gh auth token (CLI) -> Returns a non-expiring token. These are frowned upon for security reasons
• classic PAT & fine-grained PAT - these are semi-long lived secrets which are better from a security standpoint, but short-lived would be even better.

Why this change?

See section above for details. I would like to use GitHub App user access tokens with OpenShell's OAuth refresh worker.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md