- Use the limits of the API token in more permission checks. - Show a clearer message when a token limit blocks a change. - Describe API tokens with limits in SECURITY.md.