Use read:org scope instead of user for accessing orgs

[simonw]

datasette-auth-github/datasette_auth_github/views.py

Lines 19 to 24 in 31405aa

	if config.get("load_teams"):
	scope = "read:org"
	elif config.get("load_orgs"):
	scope = "user"
	else:
	scope = "user:email"

user scope is actually quite frightening - it allows write access to the user profile! read:org should work just as well here.

[simonw]

I deployed this in an org-limited deployment and confirmed that it works.