First off, thanks for this amazing terraform module!
I've experimented and found that when setting up the Github App according to the readme, step 7, the Organization - Administration: Read & Write permission is not required for everything to work properly. Seems like the Organization - Self-hosted runners: Read & Write permission is sufficient.
Perhaps the readme should be updated to reflect this? Or maybe I'm missing something?