Pass GitHub App token to add-and-commit for protected branch push

The EndBug/add-and-commit action defaults to GITHUB_TOKEN which lacks
permission to push directly to the protected main branch. Pass the
GitHub App installation token via github_token parameter.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hua7450

.github/workflows/update-versioning.yml

@@ -44,4 +44,5 @@ jobs:
           add: "."
           committer_name: Github Actions[bot]
           author_name: Github Actions[bot]
-          message: Update PolicyEngine Household API
+          message: Update PolicyEngine Household API
+          github_token: ${{ steps.app-token.outputs.token }}

changelog_entry.yaml

@@ -1,4 +1,4 @@
 - bump: patch
   changes:
     fixed:
-    - Switch versioning workflow from PAT to GitHub App token for authentication
+    - Pass GitHub App token to EndBug/add-and-commit to allow pushing to protected main branch