Publish information about Best Practives Badge repo access needs

[drusso-rh]

I was approached by a team in my organization asking:

This badge asks for read-level access to certain elements of a Github repository and organization. The Best Practices badge is an open source project and there are no public docs on what it needs access to/uses the access for, which is why we need the official evaluation.

It would be helpful if information explaining what that access is needed for and how it is used was published in an easily accessible public location.