I am very sorry
No need to be sorry! You are doing a great job, I am sure that we will all be learning lots this summer. Let’s keep discussing and working through the issues as we find them.
On the access token, I’ll defer to the fellows.
Personally I’d be concerned about security issues and think we should be asking if there’s any other options available. Can we run on a schedule for testing against main (is once a day / week enough given the environmental impact)?
For prs what happens if we add a label, does that trigger a workflow (and do we still need an access token)? Also what about buildbot? We have that for selenium and oracle tests?
I’m not sure about most of this. Just questions really to help the discussion and to improve out decisions. 
Remember, you are likely now the world expert in benchmarking django 