ci: use github app auth instead pat DK-5295

[raffis]

This is an automated PR

Current situation

We run into github rate limits accross variuous repos and jobs.
The quota for a pat authenticated user request is 5000/h.
One problem is there are many use cases where we do need a PAT because the runner provided secrets.GITHUB_TOKEN is not usable cross repository.
See https://github.com/orgs/community/discussions/46566

Proposal

• Migrate pr-title, release-label, pr-verify and pr-stale to secrets.GITHUB_TOKEN.
• Use a newly introduced doodle-renovate app instead the doodlebot PAT for renovate builds
• Reduce cron triggered renovate build to every 6h instead 2h

[coveralls]

Pull Request Test Coverage Report for Build 13809333630

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 0.0%

---

Totals
Change from base Build 13775432667:	0.0%
Covered Lines:	0
Relevant Lines:	302

---

💛 - Coveralls