Per the documentation here:
Note: If you select the
write:packagesscope, deselect the
reposcope when creating the PAT.
However, the UI does not appear to allow this; when write:packages is selected, I am unable to deselect the parent repo scope, or any child repo scope.
I am creating a PAT here: https://github.com/settings/tokens/new