Use Staticman v3

[VincentTam]

The recently updated quick start guide says the GitHub App authorization method is preferred over the legacy GitHub bot method.

Btw, I suggest "slicing" the form POST URL and store them in the Staticman JS script to block bot for forms. For an implementation, you may refer to, for example, my pending PR daattali/beautiful-jekyll782.