ci: ensure the auto-created release-please action runs CI

[lumirlumir]

Prerequisites checklist

• I have read the contributing guidelines.

What is the purpose of this pull request?

This PR follows up on #330.

In this PR, I've ensured the auto-created release-please action triggers CI.

Problem

Currently, the auto-created PR from the release-please action does not trigger CI, as shown below:

For example: eslint/rewrite#336

This can result in CI not running and may lead to issues like eslint/rewrite#308 if the check is missing.

Solution

I've used secrets.WORKFLOW_PUSH_BOT_TOKEN instead of the default secrets.GITHUB_TOKEN, following the same approach described in #330.

Also, the permissions for contents and pull-requests is no longer necessary because secrets.WORKFLOW_PUSH_BOT_TOKEN already grants the required permissions, so I removed it.

FYI: the token input reference: https://github.com/googleapis/release-please-action?tab=readme-ov-file#action-inputs

Test

I've tested it in my forked repository (using rewrite repository), and it works as expected:

lumirlumir/fork-rewrite#9

• Before: CI wasn't running

• After: CI is running

What changes did you make? (Give an overview)

This PR follows up on #330.

In this PR, I've ensured the auto-created release-please action triggers CI.

Related Issues

Ref: #330

Is there anything you'd like reviewers to focus on?

N/A

[Copilot]

Pull request overview

This PR ensures that CI workflows are triggered when the release-please action automatically creates a pull request. By switching from the default GITHUB_TOKEN to WORKFLOW_PUSH_BOT_TOKEN, the automated PRs will now properly trigger CI checks, preventing potential issues from unvalidated releases.

Key changes:

• Added token input to the release-please-action using WORKFLOW_PUSH_BOT_TOKEN
• Removed contents: write and pull-requests: write permissions (provided by the bot token)
• Maintained id-token: write and models: read permissions for npm provenance and other features

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.