Use PAT in nightly build (#584)

See
aws-observability/aws-otel-dotnet-instrumentation#307

By submitting this pull request, I confirm that you can use, modify,
copy, and redistribute this contribution, under the terms of your
choice.

Author: thpierce

.github/workflows/nightly-build.yml

@@ -108,12 +108,28 @@ jobs:
     if: always() && needs.update-dependencies.outputs.has_changes == 'true'
     runs-on: ubuntu-latest
     steps:
+    - name: Configure AWS credentials for BOT secrets
+      uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #v5.0.0
+      with:
+        role-to-assume: ${{ secrets.AWS_ROLE_ARN_SECRETS_MANAGER }}
+        aws-region: ${{ env.AWS_DEFAULT_REGION }}
+
+    - name: Get Bot secrets
+      uses: aws-actions/aws-secretsmanager-get-secrets@a9a7eb4e2f2871d30dc5b892576fde60a2ecc802 #v2.0.10
+      id: bot_secrets
+      with:
+        secret-ids: |
+          BOT_TOKEN ,${{ secrets.BOT_TOKEN_SECRET_ARN }}
+        parse-json-secrets: true
+        
     - name: Checkout repository
       uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #5.0.0
       with:
-        token: ${{ secrets.GITHUB_TOKEN }}
+        token: ${{ env.BOT_TOKEN_GITHUB_RW_PATOKEN }}
 
     - name: Create or update PR
+      env:
+        GITHUB_TOKEN: ${{ env.BOT_TOKEN_GITHUB_RW_PATOKEN }}
       run: |
         BUILD_STATUS="${{ needs.build-and-test.result }}"
         BUILD_EMOJI="${{ needs.build-and-test.result == 'success' && '✅' || '❌' }}"
@@ -145,8 +161,6 @@ jobs:
             --base main \
             --head "$BRANCH_NAME"
         fi
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   publish-nightly-build-status:
     name: "Publish Nightly Build Status"
@@ -172,4 +186,4 @@ jobs:
           aws cloudwatch put-metric-data --namespace 'ADOT/GitHubActions' \
             --metric-name Failure \
             --dimensions repository=${{ github.repository }},branch=${{ github.ref_name }},workflow=nightly_build \
-            --value $value
+            --value $value