How to use Personal access tokens

Being able to create Personal access tokens is great, but it is not entirely clear how they should be used.

See also the comments about using a personal access token when pushing over https.