How to protect github-token while using chrome-extension?

Question

I want to create chrome extension, which interacts with github repository.

---

1: User click button

2: API creates new fil