chore: fix ci security (#110)

Author: liweijie0812

.github/workflows/auto-release.yml

@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@v3
         with:
           ref: develop
-          token: ${{ secrets.PERSONAL_TOKEN }}
+          token: ${{ secrets.TDESIGN_BOT_TOKEN }}
       - name: tag and push if needed
         run: |
           data=$(cat package.json)

.github/workflows/issue-assignees.temp.yml

@@ -41,12 +41,12 @@ jobs:
 
       - name: 通知贡献者
         if: steps.assignees.outputs.contributors != ''
-        uses: actions-cool/maintain-one-comment@v2.0.0
+        uses: TDesignOteam/workflows/actions/maintain-one-comment@main
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           body: |
             ♥️ 有劳 ${{ steps.contributors.outputs.string }} 尽快确认问题。
             确认有效后将下一步计划和可能需要的时间回复给 @${{ github.event.issue.user.login }} 。
             <!-- AUTO_ASSIGENEES_NOTIFY_HOOK -->
           number: ${{ github.event.issue.number }}
-          body-include: "<!-- AUTO_ASSIGENEES_NOTIFY_HOOK -->"
+          body-include: '<!-- AUTO_ASSIGENEES_NOTIFY_HOOK -->'

.github/workflows/tag-push.yml

@@ -11,7 +11,7 @@ jobs:
     uses: TDesignOteam/workflows/.github/workflows/reusable-publish-npm.yml@main
     secrets:
       TDESIGN_SURGE_TOKEN: ${{ secrets.TDESIGN_SURGE_TOKEN }}
-      PERSONAL_TOKEN: ${{ secrets.PERSONAL_TOKEN }}
+      TDESIGN_BOT_TOKEN: ${{ secrets.TDESIGN_BOT_TOKEN }}
     with:
       package-manager: pnpm
       node-version-file: .node-version