Fix duplicate Authorization header in auto-version-and-tag checkout (#361)

* Initial plan

* fix: add persist-credentials: false to auto-version-and-tag checkout step

Co-authored-by: devakesu <61821107+devakesu@users.noreply.github.com>

* fix: configure git auth with gh auth setup-git for persist-credentials: false

Co-authored-by: devakesu <61821107+devakesu@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: devakesu <61821107+devakesu@users.noreply.github.com>

Author: Copilot

.github/workflows/pipeline.yml

@@ -267,6 +267,7 @@ jobs:
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: false
 
       - name: Import GPG key
         uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6.1.0
@@ -409,6 +410,9 @@ jobs:
         run: |
           set -euo pipefail
           
+          # Configure git to use GitHub CLI authentication (needed because persist-credentials: false)
+          gh auth setup-git
+          
           VERSION_TAG="v${{ steps.check.outputs.version }}"
           
           # If changes were made, we need to fetch the merged PR