Improve directions for setting up gh authentication #897

Some folks are having trouble deploying. I think this is to do with personal access tokens, which we don't really need for deploy to work. If they are using VS Code, then that will authenticate, so perhaps we can give better guidance.

Note that #896 at least removes the outdated instructions about SSH keys, but this doesn't really address the main issue.