One of my organizations recently announced that they will be disabling the ability to use Personal Access Tokens with our accounts, which, if I understand correctly, means that I won't be be able to use forge anymore. I wonder if you'd considered a setup for ghub wherein it's a full oauth application e.g. one that shows up at https://github.com/settings/applications, opening a browser window when necessary in order to do authentication and supporting token refreshes, etc.

An alternative I could see is if there was a way for forge to funnel all of its api calls through the 'gh' command, which already supports this setup.