GH-100 decision sheets

• When Actions secrets are available to a workflow run
• GitHub App vs OAuth app vs fine-grained vs classic personal access token
• EMU partner identity providers: Entra ID vs Okta vs PingFederate