Add minimal required scopes of the token for this action to work correctly

[WorldThirteen]

I was asked to create a token in the organization to use this tool. However, I struggled to figure out the list of least privilege scopes that required for this action to work correctly while not exposing extra scope to the token.

It would be nice to have it in the description somewhere.