fix: Use GitHub App token in auto-updater so PRs trigger CI

PRs created with GITHUB_TOKEN don't trigger pull_request workflows.
Switch to the org-level GitHub App token so test.yml runs on auto-update PRs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: anth-volk

.github/workflows/update-country-packages.yml

@@ -19,6 +19,13 @@ jobs:
       fail-fast: false
 
     steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Checkout code
         uses: actions/checkout@v4
 
@@ -30,7 +37,7 @@ jobs:
 
       - name: Check for update and open PR
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
           chmod +x .github/scripts/update-package.sh
           .github/scripts/update-package.sh ${{ matrix.package }}