Your platform team stores a shared deployment token as an organization-level secret named DEPLOY_TOKEN, scoped to selected repositories. After rotating the token, a teammate asks you to programmatically confirm exactly which repositories are currently authorized to use this secret before updating any workflows. Which REST API request returns that list?