chore: use OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE for install-openhands-website (#691)

* chore: use OPENHANDS_BOT_GITHUB_PAT_PUBLIC in update-install-website.yml

* Update .github/workflows/update-install-website.yml

Co-authored-by: OpenHands Bot <contact@all-hands.dev>

* Update .github/workflows/update-install-website.yml

Co-authored-by: OpenHands Bot <contact@all-hands.dev>

* Update .github/workflows/update-install-website.yml

Co-authored-by: OpenHands Bot <contact@all-hands.dev>

* chore: use OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE for install-website workflow

* chore: use OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE for install-website workflow

* chore: force workflow re-index

* fix: use OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE and OpenHands org

---------

Co-authored-by: allhands-bot <allhands-bot@users.noreply.github.com>
Co-authored-by: OpenHands Bot <contact@all-hands.dev>

Author: 3 people

.github/workflows/update-install-website.yml

@@ -1,8 +1,5 @@
 ---
 # Workflow that updates the install-openhands-website repository when a release is published
-# TODO: Once All-Hands-AI/install-openhands-website is migrated to the OpenHands org,
-#       replace secrets.PAT_TOKEN here with secrets.OPENHANDS_BOT_GITHUB_PAT_PUBLIC
-#       and add the new repo to the PAT's allowlist. Tracked in OpenHands/OpenHands-CLI#689.
 name: Update Install Website Version
 
 # Trigger when a release is published (not draft) or manually
@@ -16,8 +13,6 @@ on:
                 required: true
                 type: string
 
-# Note: This workflow requires PAT_TOKEN secret to have access to the All-Hands-AI/install-openhands-website repository
-# Create a Personal Access Token (PAT) with repo permissions and store it as PAT_TOKEN in repository secrets
 permissions:
     contents: read
 
@@ -47,8 +42,8 @@ jobs:
 
             - name: Clone install-openhands-website repository
               run: |
-                  # Use PAT_TOKEN to clone the repository
-                  git clone https://${{ secrets.PAT_TOKEN }}@github.com/All-Hands-AI/install-openhands-website.git website-repo
+                  # Use OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE to clone the repository
+                  git clone https://${{ secrets.OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE }}@github.com/OpenHands/install-openhands-website.git website-repo
                   cd website-repo
                   git config user.name "github-actions[bot]"
                   git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
@@ -85,9 +80,9 @@ jobs:
               run: |
                   # Check if a PR already exists for this version
                   EXISTING_PR=$(curl -s \
-                    -H "Authorization: token ${{ secrets.PAT_TOKEN }}" \
+                    -H "Authorization: token ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE }}" \
                     -H "Accept: application/vnd.github.v3+json" \
-                    "https://api.github.com/repos/All-Hands-AI/install-openhands-website/pulls?state=open&head=update-version-${{ steps.extract_version.outputs.version }}" \
+                    "https://api.github.com/repos/OpenHands/install-openhands-website/pulls?state=open&head=update-version-${{ steps.extract_version.outputs.version }}" \
                     | jq -r '.[0].html_url // "null"')
 
                   if [ "$EXISTING_PR" != "null" ]; then
@@ -107,9 +102,9 @@ jobs:
 
                   # Create PR using GitHub API
                   curl -X POST \
-                    -H "Authorization: token ${{ secrets.PAT_TOKEN }}" \
+                    -H "Authorization: token ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_INSTALL_WEBSITE }}" \
                     -H "Accept: application/vnd.github.v3+json" \
-                    https://api.github.com/repos/All-Hands-AI/install-openhands-website/pulls \
+                    https://api.github.com/repos/OpenHands/install-openhands-website/pulls \
                     -d '{
                       "title": "Update OpenHands CLI version to ${{ steps.extract_version.outputs.version }}",
                       "head": "'"$BRANCH_NAME"'",