Limit the permissions of the API token in the examples

[crawford]

This action only requires read/write access to the "checks" scope. When the "permissions" object is present, all of the scopes default to "none".