ci: rename docs-repo PAT to WASMCLOUD_DOCS_BOT_PAT

Distinct name from the WASMCLOUD_BOT_PAT on wasmCloud/wasmCloud, so the two
tokens can diverge in scope, lifetime, or owning account without confusion.

Signed-off-by: Eric Gregory <eric@cosmonic.com>

Author: ericgregory

.github/workflows/release-docs.yml

@@ -5,7 +5,7 @@ on:
     tags:
       - 'docs-v*'
   # workflow_dispatch is a no-PAT escape hatch. When update-version.yml or
-  # tag-after-merge.yml can't run (e.g. WASMCLOUD_BOT_PAT expired), dispatch
+  # tag-after-merge.yml can't run (e.g. WASMCLOUD_DOCS_BOT_PAT expired), dispatch
   # this workflow directly with a version input to publish the offline docs
   # bundle from main HEAD. The GitHub Release, tarball, and container image
   # all get created against `docs-v<version>` using GITHUB_TOKEN alone.

.github/workflows/tag-after-merge.yml

@@ -9,7 +9,7 @@ name: Tag after release-bump merge
 #
 # workflow_dispatch is a manual escape hatch: pass a version explicitly to
 # push a docs-v tag from main without going through the PR-bump flow. Useful
-# when update-version.yml has failed to open the PR (e.g. WASMCLOUD_BOT_PAT
+# when update-version.yml has failed to open the PR (e.g. WASMCLOUD_DOCS_BOT_PAT
 # expired) and the offline docs pipeline needs to catch up.
 
 on:
@@ -41,10 +41,10 @@ jobs:
     steps:
       - name: Verify bot PAT is available
         env:
-          BOT_PAT: ${{ secrets.WASMCLOUD_BOT_PAT }}
+          BOT_PAT: ${{ secrets.WASMCLOUD_DOCS_BOT_PAT }}
         run: |
           if [[ -z "${BOT_PAT}" ]]; then
-            echo "::error::secrets.WASMCLOUD_BOT_PAT is empty or unset."
+            echo "::error::secrets.WASMCLOUD_DOCS_BOT_PAT is empty or unset."
             echo ""
             echo "This workflow needs a bot PAT with 'repo' scope to push the docs-v tag."
             echo "A tag pushed by the default GITHUB_TOKEN does NOT trigger downstream"
@@ -55,7 +55,7 @@ jobs:
             echo "GitHub Release with GITHUB_TOKEN alone."
             echo ""
             echo "Rotate/renew the token at:"
-            echo "    Repo → Settings → Secrets and variables → Actions → WASMCLOUD_BOT_PAT"
+            echo "    Repo → Settings → Secrets and variables → Actions → WASMCLOUD_DOCS_BOT_PAT"
             exit 1
           fi
 
@@ -66,7 +66,7 @@ jobs:
           fetch-depth: 0
           # Use bot PAT so the tag push triggers release-docs.yml. A tag pushed
           # by the default GITHUB_TOKEN does not fire downstream workflows.
-          token: ${{ secrets.WASMCLOUD_BOT_PAT }}
+          token: ${{ secrets.WASMCLOUD_DOCS_BOT_PAT }}
 
       - name: Extract version
         id: ver

.github/workflows/update-version.yml

@@ -30,26 +30,26 @@ jobs:
     steps:
       - name: Verify bot PAT is available
         env:
-          BOT_PAT: ${{ secrets.WASMCLOUD_BOT_PAT }}
+          BOT_PAT: ${{ secrets.WASMCLOUD_DOCS_BOT_PAT }}
         run: |
           if [[ -z "${BOT_PAT}" ]]; then
-            echo "::error::secrets.WASMCLOUD_BOT_PAT is empty or unset."
+            echo "::error::secrets.WASMCLOUD_DOCS_BOT_PAT is empty or unset."
             echo ""
             echo "This workflow needs a bot PAT with 'repo' scope to check out the repo,"
             echo "run peter-evans/create-pull-request, and let the resulting PR trigger CI."
             echo "The default GITHUB_TOKEN cannot substitute — PRs opened by GITHUB_TOKEN"
             echo "do not fire downstream workflows."
             echo ""
             echo "Rotate/renew the token at:"
-            echo "    Repo → Settings → Secrets and variables → Actions → WASMCLOUD_BOT_PAT"
+            echo "    Repo → Settings → Secrets and variables → Actions → WASMCLOUD_DOCS_BOT_PAT"
             exit 1
           fi
 
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # Use bot PAT so the PR triggers CI workflows.
-          token: ${{ secrets.WASMCLOUD_BOT_PAT }}
+          token: ${{ secrets.WASMCLOUD_DOCS_BOT_PAT }}
 
       - name: Update version constant
         run: |
@@ -61,7 +61,7 @@ jobs:
       - name: Create pull request
         uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
-          token: ${{ secrets.WASMCLOUD_BOT_PAT }}
+          token: ${{ secrets.WASMCLOUD_DOCS_BOT_PAT }}
           commit-message: "docs: update wasmCloud version to ${{ env.NEW_VERSION }}"
           branch: "docs/update-version-${{ env.NEW_VERSION }}"
           title: "docs: update wasmCloud version to ${{ env.NEW_VERSION }}"