Lists repositories the org connection can see, for the scan-scope and Create Project repo pickers. Given an optional q, runs a provider-side name search when q is present (so a large connection need not be enumerated to find a repo) or lists the first page of the account otherwise. Returns the bare repo name, the owner/repo fullName, the repo url, whether the repo is archived, and when it was last pushed to (pushedAt, null when the provider does not report it). Results are capped; hasMore signals the caller to narrow with q instead of scrolling. Reads connection metadata only (no tokens), so it is gated on view_integrations (any org member) rather than manage_integrations: a Project creator can pick a repository without gaining integration-management access. Returns 422 (not_scannable_integration) for non-scannable integration types, and 502 when the provider is unreachable or rate-limited — distinct from an empty list, so a load failure never reads as "this connection has no repos". With scope=account on a GitHub App connection and github-helper-reads on for the org, lists what every Tessl GitHub App connection on the same GitHub account can see, once each, so a repository only Tessl App can see is included.