Update docs

[laurentsimon]

• Explain that the results will only be available once a new commit is pushed. We can have a workflow_dispatch trigger users can trigger manually the first time to see the results flow
• Explain where to find the reason why a run failed
• Move users to GITHUB_TOKEN
• support for workflow_dispatch
• Explain whether pull request trigger is supported or not
• Call out that running scorecard on forks is not officially supported
• Orgs may need to enable GitHub Advanced Security Scorecard action fails - private repo with 0 commits #134 (comment)
• Explain the difference of PAT permissions that are needed
• In the starter workflow and our example workflow, remove the PAT. Have a commented out line for PAT, with a link to generate the PAT using the URL + the URL to create the repo secret

[laurentsimon]

cc @naveensrinivasan added Call out that running scorecard on forks is not officially supported, per our discussion in #135

[naveensrinivasan]

cc @naveensrinivasan added Call out that running scorecard on forks is not officially supported, per our discussion in #135

Thank you!

[laurentsimon]

@naveensrinivasan thanks for all the e2e tests, it's great. Is there a way to document where to look for, for example for workflow_dispatch, schedule, push and pull_request triggers. Where to find them :-)?

Thanks!