if we explicitly add inject auth token to the calls issued by github.Client via its WithAuthToken() then they overwritten by the transport.

the problem is here:

// transport.go

creq := cloneRequest(req) // per RoundTripper contract
creq.Header.Set("Authorization", "token "+token)