extract github oauth token

[nicolai86]

Instead of compiling the github oauth token into the plugin it would be more secure to place it inside KMS and then resolving this at runtime. This also allows for easier secret rotation if the need arises.