fix(auth/token): fix migration eligibility validation for read requests

Related to #421 (closed).

While working on #421 (closed), we noticed that read requests for new repositories were not being routed to the new code path. This is due to a bug in the auth token evaluation logic. This MR fixes that.