What events does the bors app need to subscribe to?

The new app creation flow involves choosing which events need to be subscribed to. I made a guess at which ones were needed but I'm not totally sure. Also, it would be nice if the list of required permissions in the README could be updated to match github's current list of possible permissions.