docs: clarify PAT requirements for gist subscriber store

README.md

@@ -128,13 +128,13 @@ SUBSCRIBER_STORE=gist
 | Variable | Description |
 |---|---|
 | `GITHUB_GIST_ID` | ID of a private Gist containing `subscribers.json` |
-| `GITHUB_TOKEN` | GitHub PAT with `gist` scope (the default Actions token cannot access private gists) |
+| `GITHUB_TOKEN` | PAT with gist access: classic PAT with `gist` scope, or fine-grained PAT with Gists read/write (the default Actions token cannot access private gists) |
 
 **Setup:**
 
 1. Create a [secret Gist](https://gist.github.com/) with a file named `subscribers.json` containing `[]`
 2. Copy the Gist ID from the URL
-3. Create a PAT with `gist` scope
+3. Create a PAT with gist access — [classic PAT](https://github.com/settings/tokens/new) with `gist` scope, or [fine-grained PAT](https://github.com/settings/tokens?type=beta) with Gists read/write
 4. Add both as repo secrets (`SUBSCRIBERS_GIST_ID`, `SUBSCRIBERS_GIST_TOKEN`)
 
 Same file format as the JSON store:

site/src/content/docs/configuration/environment.mdx

@@ -63,7 +63,7 @@ See [LLM Providers](/llm-providers) for setup details.
 | Variable | Description |
 |---|---|
 | `GITHUB_GIST_ID` | ID of a private Gist containing `subscribers.json` |
-| `GITHUB_TOKEN` | GitHub PAT with `gist` scope (the default Actions token cannot access private gists) |
+| `GITHUB_TOKEN` | PAT with gist access: classic PAT with `gist` scope, or fine-grained PAT with Gists read/write (the default Actions token cannot access private gists) |
 
 ### Google Sheets
 

site/src/content/docs/getting-started.mdx

@@ -91,7 +91,7 @@ If your repo is **public**, don't use the default JSON subscriber store — `sub
 ```bash
 SUBSCRIBER_STORE=gist
 GITHUB_GIST_ID=your_gist_id
-GITHUB_TOKEN=ghp_your_pat   # PAT with gist scope
+GITHUB_TOKEN=ghp_your_pat   # PAT with gist access (classic: gist scope; fine-grained: Gists read/write)
 ```
 
 See [GitHub Gist Store](/subscriber-stores/gist) for setup steps.

site/src/content/docs/subscriber-stores/gist.mdx

@@ -21,9 +21,12 @@ Create a [new secret Gist](https://gist.github.com/) with a file named `subscrib
 
 Copy the Gist ID from the URL (e.g., `https://gist.github.com/yourname/abc123def456` → `abc123def456`).
 
-### 2. Create a GitHub PAT with `gist` scope
+### 2. Create a GitHub PAT with gist access
 
-The default `GITHUB_TOKEN` in Actions is scoped to the repository and **cannot access private gists**. Create a [fine-grained PAT](https://github.com/settings/tokens?type=beta) or classic PAT with the `gist` scope.
+The default `GITHUB_TOKEN` in Actions is scoped to the repository and **cannot access private gists**. Create one of:
+
+- **[Classic PAT](https://github.com/settings/tokens/new)** — check the `gist` scope
+- **[Fine-grained PAT](https://github.com/settings/tokens?type=beta)** — enable **Gists** → Read and write under Account permissions
 
 ### 3. Add repository secrets
 
@@ -45,7 +48,7 @@ export GITHUB_TOKEN=ghp_your_pat_here
 | Variable | Required | Description |
 |---|---|---|
 | `GITHUB_GIST_ID` | Yes | ID of the private Gist |
-| `GITHUB_TOKEN` | Yes | GitHub PAT with `gist` scope (the default `GITHUB_TOKEN` in Actions cannot access private gists) |
+| `GITHUB_TOKEN` | Yes | PAT with gist access — classic PAT with `gist` scope, or fine-grained PAT with Gists read/write (the default Actions token cannot access private gists) |
 
 ## File format
 
@@ -95,7 +98,7 @@ Sent emails are logged to an `email-log.json` file in the same Gist (created aut
 ```
 
 :::caution
-You must use a PAT with `gist` scope — the default `${{ github.token }}` cannot access private gists.
+You must use a PAT with gist access — the default `${{ github.token }}` cannot access private gists. Use a classic PAT with `gist` scope, or a fine-grained PAT with **Gists** read/write permission.
 :::
 
 ## Managing subscribers