repo access list, grant and revoke as an Access section in repo settings: a role chip menu regrants, the add row grants, and a swipe revokes after a confirmation. The grants read keeps the nil-plus-error shape deps uses. The live suite grants and revokes apple-review on the scratch repo.