docs: mentioned ACCESS_TOKEN and NPM_TOKEN in setup steps (#114)

Author: JoshuaKGoldberg

README.md

@@ -52,8 +52,11 @@ To use this template:
 
 1. Click the [_Use this template_](https://github.com/JoshuaKGoldberg/template-typescript-node-package/generate) button to create a new repository with the same Git history
 2. Open that repository, such as by [cloning it locally](https://docs.github.com/en/repositories/creating-and-managing-repositories/cloning-a-repository) or [developing in a codespace](https://docs.github.com/en/codespaces/developing-in-codespaces/developing-in-a-codespace)
-3. `pnpm install`
-4. `pnpm run setup`
+3. Create two tokens in [repository secrets](https://docs.github.com/en/actions/security-guides/encrypted-secrets):
+   - `ACCESS_TOKEN`: A [GitHub PAT](https://github.com/settings/tokens/new) with _repo_ permissions
+   - `NPM_TOKEN`: An [npm access token](https://docs.npmjs.com/creating-and-viewing-access-tokens/) with _Automation_ permissions
+4. `pnpm install`
+5. `pnpm run setup`
 
 > The setup script removes the `## Explainer` and `## Setup` from this README.md.