Support auth via OAuth or personal access tokens

We used to use GitHub's tokens, but they seemed to have withdrawn them.

Checking their docs now, though, it seems you can create "personal access tokens" via https://github.com/settings/tokens/new which can be used in basic HTTP auth in place of a username and password: https://github.com/blog/1509-personal-api-tokens

So, if that still works, we should change the documentation to suggest creating a token (and listing the minimum access requirements - at a cursory glance it would appear the minimum we require is:

repo, public_repo, repo:status, read:repo_hook, write:repo_hook

Looks like this should be easier than I thought - it provides a way to avoid dealing with the horrible hell-spawned clusterfuck that is OAuth, which is kinda nasty for web apps and next to useless for non-webapps.

該 issue 未指定文件；請先檢查 repository 目前的驗證文件，以及連結的 GitHub token 文件。完成的標準是：文件說明 personal access token 的設定方式，並列出所需的最小存取 scope，同時依照 project 的描述處理受支援的 OAuth 選項。

由索引模型根據 Issue 內容生成。