title: How to resolve "refusing to allow an OAuth App to create or update workflow" on git push
body: <p>Getting</p>
  <blockquote>
  <p>refusing to allow an OAuth App to create or update workflow <code>.github/workflows/cd.yml</code> without <code>workflow</code> scope&quot;</p>
  </blockquote>
  <p>on <code>git push</code>. How to grant <code>workflow</code> scope?</p>