pub fn normalize_repo(repo: &str) -> String
Canonical ACL spelling of a repository name: one trailing .git removed, so owner/repo and owner/repo.git are the same grant.
.git
owner/repo
owner/repo.git