#47 added support for the `GITHUB_TOKEN` and `COMPOSER_AUTH ` env. But it's not documented. I think we should mention the support on the `wp package install` command so it's visible on https://developer.wordpress.org/cli/commands/package/install/.