Further more.
If the bot is open source, with the intent to download and run a copy, as apposed to contributing via PR requests, you would probably, want users to create and apply their own Client ID and Secret keypair in order to not leak your own secrets, for the purpose of generating oAuth tokens/bearers and Refreshes thereof