If you want that level of granularity then you pretty much have to write an app but it's absolutely possible.
I've been toying with writing a credential helper to obtain the oauth bearer token, but Authen::SASL::XOAUTH2 still needs to be written so that git-send-mail knows how to use it.