fix: use org OPENAPI secret for sync workflow

The workflow previously referenced secrets.OPENAPI_SYNC_TOKEN, which
does not exist in the org or repo and caused both post-merge runs of
'TinyNode Shared OpenAPI Sync' to fail at the receiver checkout step.
Switching to secrets.OPENAPI reuses the already-working org-level
secret that rerum_server_nodejs's sync workflows use. TinyNode must be
added to that secret's selected-repos list for the sync to succeed.

Author: thehabes

.github/workflows/shared_openapi_sync.yaml

@@ -24,7 +24,7 @@ jobs:
         with:
           repository: cubap/rerum_openapi
           ref: main
-          token: ${{ secrets.OPENAPI_SYNC_TOKEN }}
+          token: ${{ secrets.OPENAPI }}
           path: receiver
 
       - name: Verify receiver stub exists
@@ -36,7 +36,7 @@ jobs:
       - name: Create or update sync pull request
         uses: peter-evans/create-pull-request@v8
         with:
-          token: ${{ secrets.OPENAPI_SYNC_TOKEN }}
+          token: ${{ secrets.OPENAPI }}
           path: receiver
           add-paths: schemas/openapi/tinynode-shared-components.openapi.yaml
           commit-message: "chore: sync TinyNode shared OpenAPI artifact"

README.md

@@ -62,7 +62,7 @@ npm run ci:full
 
 ### Shared OpenAPI Artifact
 TinyNode owns the canonical shared OpenAPI artifact at `openapi/components/tinynode-shared-components.openapi.yaml`.
-When that file changes on `main`, the `TinyNode Shared OpenAPI Sync` workflow copies it into `cubap/rerum_openapi` at `schemas/openapi/tinynode-shared-components.openapi.yaml` and opens or updates the sync pull request there. The workflow expects a repository secret named `OPENAPI_SYNC_TOKEN` with permission to push a sync branch and open pull requests in `cubap/rerum_openapi`.
+When that file changes on `main`, the `TinyNode Shared OpenAPI Sync` workflow copies it into `cubap/rerum_openapi` at `schemas/openapi/tinynode-shared-components.openapi.yaml` and opens or updates the sync pull request there. The workflow uses the organization secret `OPENAPI` (already in use by `rerum_server_nodejs`); TinyNode must be in that secret's selected-repos list.
 
 And start the app
 ```shell