Should my bot have its own email GitHub account or phone number

Yes, for most setups. Isolating the bot with separate accounts and phone numbers reduces the blast radius if something goes wrong. This also makes it easier to rotate credentials or revoke access without impacting your personal accounts.
Start small. Give access only to the tools and accounts you actually need, and expand later if required.
Docs: Security, Pairing.