Add permissions input to narrow down access on a given token request.

[gagoar]

When a token is generated, if we don't pass a permissions input during the request, that token comes with all the allowed permissions available in the App.

Sometimes we want to narrow down those permissions in a given token generation.

https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#create-an-installation-access-token-for-an-app