feat: load read-only GitHub credential

modules/capabilities/git.nix

@@ -46,6 +46,12 @@ in
         personal.allowedSigners ++ work.allowedSigners ++ [ "" ]
       );
 
+      programs.zsh.initContent = ''
+        if [[ -r "${config.xdg.configHome}/yookr/github-read-only.token" ]]; then
+          export GH_TOKEN="$(< "${config.xdg.configHome}/yookr/github-read-only.token")"
+        fi
+      '';
+
       programs.git = {
         enable = true;
         signing.format = "ssh";