I don't think this was supported when I first set things up (or I somehow totally missed it 🤷), but I noticed (in #226) than we can now use GitHub apps instead of normal user accounts to create the fixture update PRs. This has all the same advantages, but is easier to manage (no extra user accounts) and lets us restrict permissions in a much more fine-grained way than is possible with classic PATs (and fine-grained PATs are not available for non-org repos). Much better!
I don't think this was supported when I first set things up (or I somehow totally missed it 🤷), but I noticed (in #226) than we can now use GitHub apps instead of normal user accounts to create the fixture update PRs. This has all the same advantages, but is easier to manage (no extra user accounts) and lets us restrict permissions in a much more fine-grained way than is possible with classic PATs (and fine-grained PATs are not available for non-org repos). Much better!