Proposal to Implement GitHub Apps Authentication for Private Repository Sources

[tachiyu]

Thank you for your ongoing work and dedication to golang-migrate.

Currently, golang-migrate supports Personal Access Tokens (PATs) for authenticating with private GitHub repositories. However, using user-bound PATs for automated operations on servers or other systems is not ideal from both a security and operational standpoint.

I propose adding support for GitHub Apps authentication as a more secure and flexible alternative. GitHub Apps allow systems to authenticate with independent credentials, much like a service account. They provide granular permissions scoped to specific repositories or organizations, and their short-lived tokens offer a significant security advantage.

Implementing this feature would provide users with a safer, more robust authentication method.

Thank you for your consideration.