- missed the `/read` on the end
- add rpmbuilder approle - add policies to acces gitea/github read-only tokens