Use internal bot for versioning (#80)

Author: Andarist

.github/workflows/publish.yml

@@ -16,6 +16,7 @@ jobs:
   version:
     name: Version
     runs-on: ubuntu-latest
+    environment: version
     timeout-minutes: 10
     outputs:
       hasChangesets: ${{ steps.changesets.outputs.hasChangesets }}
@@ -32,10 +33,17 @@ jobs:
         with:
           skip-cache: true # avoid cache poisoning attacks
 
+      - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        id: app-token
+        with:
+          client-id: ${{ vars.APP_CLIENT_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Create or update release pull request
         id: changesets
         uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0
         with:
+          github-token: ${{ steps.app-token.outputs.token }}
           version: pnpm version-packages
 
   publish: