A developer needs to create a personal access token for a script that will only read issues and pull requests from three specific repositories in your organization. Your enterprise security policy requires that tokens grant the minimum access necessary and that token access to individual repositories can be explicitly limited. Which token approach best satisfies these requirements?