ci: use actions/create-github-app-token

[nielspardon]

• replaces the deprecated tibdex/github-app-token with actions/create-github-app-token
• requests token for substrait and substrait-packaging repos to enable ci/release/notify.sh script

---

This change is 

[nielspardon]

@vbarua I think this should help with the 403 we are getting currently:

[4:43:35 AM] [semantic-release] [@semantic-release/exec] › ℹ  Call script ci/release/notify.sh 0.88.0
could not create workflow dispatch event: HTTP 403: Resource not accessible by integration (https://api.github.com/repos/substrait-io/substrait-packaging/actions/workflows/226147488/dispatches)

https://github.com/substrait-io/substrait/actions/runs/24298853195/job/70948495423#step:5:156

[nielspardon]

I think we also need to change the permissions for the Github App to include Actions write access to allow it to dispatch the workflow run in the substrait-packaging repo. This requires Github org admin permissions which apparently PMC members do not have.

[vbarua]

Based on https://docs.github.com/en/rest/actions/workflows?apiVersion=2026-03-10#create-a-workflow-dispatch-event, I added Actions: Write permissions to the Substrait Project Bot.

Going to merge this, and we can see if that solves the issue in the next release.

[vbarua]

Thanks for updating this. I can take a look at the permissions issue, but I think I also gave you the correct access now.