Bug: Detect read-only token for deployment API.

[ryan-roemer]

Our lib/github/deployment.js just checks the presence of a token to decide if it should attempt the deployment API. But in GH actions, there is a token, just a read-only one, so it actually fails.

Tasks:

• Detect read-only token and skip deployment actions