chore: uses app to bypass branch protections

.github/workflows/publish-package.yml

@@ -32,31 +32,38 @@ jobs:
           echo "type=$VERSION_TYPE" >> $GITHUB_OUTPUT
           echo "Running a $VERSION_TYPE release"
 
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          ref: "main"
-          fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Setup Node
         uses: actions/setup-node@v3
         with:
           node-version: "18.15"
           cache: "yarn"
           registry-url: "https://registry.npmjs.org"
 
+      - name: Configure git access
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.JAM_GIT_PUSHER_APP_ID }}
+          private-key: ${{ secrets.JAM_GIT_PUSHER_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          ref: "main"
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Configure git author
+        run: |
+          git config user.name github-actions
+          git config user.email github-actions@github.com
+
       - name: Install dependencies
         run: yarn install --frozen-lockfile --non-interactive
 
       - name: Build
         run: yarn build
 
-      - name: Configure Git
-        run: |
-          git config --local user.email "action@github.com"
-          git config --local user.name "GitHub Action"
-
       - name: Tag release
         id: bump-version
         env:
@@ -71,7 +78,7 @@ jobs:
           git tag v$NEW_VERSION
           git push --tags origin main
 
-      - name: Create GitHub Release
+      - name: Create a GitHub Release
         uses: actions/create-release@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}