feat: implement repo-specific access tokens in relevant search & list APIs.  **Breaking**: the following APIs could previously return private repositories when using a public-only access token, but can no longer do so: `/user/repos`, `/users/{username}/repos`, `/orgs/{org}/repos`, and `/teams/{id}/repos`.