fix: passing on token from parent workflow

Author: dotkas

npm/action.yml

@@ -130,4 +130,6 @@ runs:
       if: inputs.automerge == 'true'
       uses: alchemaxinc/composite-toolbox/merge-pr@v1
       with:
+        token: ${{ inputs.token }}
+        merge-method: 'squash'
         pull-request-number: ${{ steps.open-pr.outputs.pr_number }}