doc/admin: clearer table for required token scopes

Created by: bobheadxi

Rewrites required token scopes docs for clarity, and notes that permissions sync requires write:repo or write:org.