gh secret set MOOCHY_ENROLL --user # or for one repository: --app codespaces --repo owner/repo