Give machines a principal.
Not the keys to everything.

A bot or coding agent authenticates like any other principal. Give it only the repository and reference capabilities it needs; audit it the same way.