Summary

Adds optional repo parameter to list_issue_types so coding/cloud agents can list issue types using only metadata:read instead of org:read.

Closes https://github.com/github/plan-track-agentic-toolkit/issues/125

depends on https://github.com/github/github/pull/436186

Why

Cloud agent / SWE agent / coding agent don't have the org scope, which blocked them from using list_issue_types. Matches the list_issue_fields implementation

What changed

• list_issue_types now accepts an optional repo param. With repo set, calls GET /repos/{owner}/{repo}/issue-types; without it, falls back to the existing GET /orgs/{owner}/issue-types path.
• requiredScopes widened from [ReadOrg] to [Repo, ReadOrg] (OR semantics), so the tool surfaces for tokens with either scope.
• Description tightened to make the choice explicit for agents.
• IFC label on the repo path follows the repo's visibility (via attachRepoVisibilityIFCLabelLazy), mirroring list_issue_fields. Org path keeps the conservative private label.
• Adjusted docs generator to address confusing implication when listing multiple required token scopes

MCP impact

• Tool schema or behavior changed
  • Schema: owner still required, new optional repo. No breaking changes.
  • Behavior: added a code path; existing org-only callers unaffected.

Prompts tested (tool changes only)

Tested end-to-end against a local dotcom monolith (with the backing endpoint behind a per-repo feature flag) using a FGPAT with only metadata:read:

• "List the issue types for github/public-server" → returns Task, Bug, Feature
• "List issue types for GITHUB/PUBLIC-SERVER" → returns same (case-insensitive)
• "List issue types for github/does-not-exist" → surfaces 404 cleanly
• Repo-level disable for one type → that type is correctly filtered from the response
• "List the issue types for the github org" (no repo) → org path unchanged

Security / limits

• Auth / permissions considered
  • Repo path is gated by metadata:read (matches :issue_type_reader role semantics in dotcom). No new data exposure: only enabled issue types reachable for the actor are returned. Token scope filtering is OR (either repo or read:org is sufficient), confirmed by HasRequiredScopes semantics.

Tool renaming

• I am not renaming tools as part of this PR

Lint & tests

• Linted locally with ./script/lint
• Tested locally with ./script/test

Added 2 new sub-tests to Test_ListIssueTypes (successful_repo_issue_types_retrieval, repo_not_found).

Docs

• Updated (README / docs / examples)

Regenerated via script/generate-docs after the schema change. Also updated the list_issue_types.snap toolsnap.