Let's wait before merging this: I'm actually not sure if Coder the company gets the accesses I outlined. I'll double check and confirm by Friday.

@EdwardAngert I checked and I believe the company doesn't get access to the data after all. I added the "to the best of our knowledge" disclaimer because GitHub documentation doesn't directly say an app's administrator doesn't get access. I looked and as far as I can tell, it doesn't specify a way to get this data, and I wasn't able to obtain it in my testing. I can't point to a specific piece of documentation that says it can't be done, so there might be a way I'm not aware of.

GitHub only lets the app administrator see users who use its app if the userinstalls it in their account, but in the login process the Coder serverauthenticates with the GitHub app on behalf of the user instead.

Let me know if the copy looks good to you.

/cherry-pick release/2.20