fix: Use GitHub App token in versioning so releases are created

The version-bump commit uses GITHUB_TOKEN, which doesn't re-trigger
workflows. Switch to the org-level GitHub App token so the "Update
package version" commit triggers Phase 2 (git tag + GitHub Release).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: anth-volk

.github/workflows/versioning.yml

@@ -19,10 +19,17 @@ jobs:
     if: github.event.head_commit.message != 'Update package version'
 
     steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Checkout repo
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Install uv
         uses: astral-sh/setup-uv@v5

changelog.d/149.fixed.md

@@ -0,0 +1 @@
+Versioning workflow now creates GitHub Releases by using App token to trigger Phase 2.