Fix/bump style bot sha (#1229)

* [CI] Bump style-bot-action to hardened SHA (TOCTOU fix)

* [CI] Bump style-bot-action SHA (fix GraphQL type mismatch)

* [CI] Fix: use correct full SHA for style-bot-action

* [CI] Bump style-bot-action SHA (pushedDate null fix)

* [CI] Fix: use correct full SHA for style-bot-action

* [CI] Bump style-bot-action SHA (add pull-requests permission)

* [CI] Bump style-bot-action SHA (per-job permissions)

* [CI] Add contents: read permission required by reusable workflow

* [CI] Bump style-bot-action SHA

* [CI] Bump style-bot-action to final hardened SHA

* [CI] Bump style-bot-action SHA + switch to GitHub App

Author: paulinebm

.github/workflows/pr_style_bot.yaml

@@ -10,8 +10,9 @@ permissions:
 
 jobs:
   style:
-    uses: huggingface/huggingface_hub/.github/workflows/style-bot-action.yml@b85b288d73b43e883401004a697010abea7adf1d
+    uses: huggingface/huggingface_hub/.github/workflows/style-bot-action.yml@e5365a9b53b19a0888a442075cc1032ab988a466
     with:
       python_quality_dependencies: "[quality]"
     secrets:
-      bot_token: ${{ secrets.HF_STYLE_BOT_ACTION }}
+      app_id: ${{ secrets.HF_BOT_STYLE_APP_ID }}
+      app_private_key: ${{ secrets.HF_BOT_STYLE_SECRET_PEM }}