fix: use token-embedded URL for Homebrew tap push

git config http.extraHeader wasn't working via Bun shell. Use
x-access-token URL scheme instead, which is the standard GitHub
CI approach for cross-repo pushes with PATs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: anandgupta42

packages/altimate-code/script/publish.ts

@@ -131,13 +131,12 @@ if (!Script.preview) {
     console.error("GITHUB_TOKEN is required to update homebrew tap")
     process.exit(1)
   }
+  const tapUrl = `https://x-access-token:${token}@github.com/AltimateAI/homebrew-tap.git`
   await $`rm -rf ./dist/homebrew-tap`
-  await $`git clone https://github.com/AltimateAI/homebrew-tap.git ./dist/homebrew-tap`
+  await $`git clone ${tapUrl} ./dist/homebrew-tap`
   await Bun.file("./dist/homebrew-tap/altimate-code.rb").write(homebrewFormula)
   await $`cd ./dist/homebrew-tap && git config user.name "AltimateAI Bot"`
   await $`cd ./dist/homebrew-tap && git config user.email "bot@altimate.ai"`
-  // Set auth header in local git config (not exposed in process args)
-  await $`cd ./dist/homebrew-tap && git config http.extraHeader "Authorization: Bearer ${token}"`
   await $`cd ./dist/homebrew-tap && git add altimate-code.rb`
   await $`cd ./dist/homebrew-tap && git commit -m "Update to v${Script.version}"`
   await $`cd ./dist/homebrew-tap && git push`