installation access tokens

Audit GitHub App integrations for 520-character stateless installation tokens, safe secret redaction, storage limits, and the November 30 deadline.