In the in-app instructions for the Bitbucket.org connection type, we ask the user to create an app password for "read scope over your repositories and teams". However, these don't seem to 1:1 map onto valid values on the Bitbucket side.
Also, it does not mention the account scope. Without this scope, the code host connection check does not work, though. (But I personally think we should fix that by listing /2.0/repositories/<username> instead, and not require an additional scope).

/cc @sourcegraph/source