build-and-deploy/release-git: support the new Pacman repository

In git-for-windows/build-extra#595, I started
the official transition of Git for Windows' Pacman repository away from
an Azure Blob container in my personal account to
https://github.com/git-for-windows/pacman-repo.

For the transition period, this still requires the token to upload to
the Azure Blob container, but it also already requires the token to push
to `pacman-repo` and to create GitHub releases there.

The two users of `pacman-helper.sh quick_add` that now need this token
are hereby adapted accordingly.

Signed-off-by: Johannes Schindelin <[email protected]>

Author: dscho

.github/actions/pacman-packages/action.yml

@@ -118,12 +118,20 @@ runs:
         mkdir -p "$HOME" &&
         echo '${{ inputs.priv-gpg-key }}' | tr % '\n' | gpg $GPG_OPTIONS --import &&
         git config --global gpg.program "$RUNNER_TEMP/build-extra/gnupg-with-gpgkey.sh"
+    - uses: actions/create-github-app-token@v1
+      id: pacman-repo-token
+      with:
+        app-id: ${{ inputs.app-id }}
+        private-key: ${{ inputs.private-key }}
+        owner: ${{ inputs.owner }}
+        repositories: pacman-repo
     - name: Upload Pacman packages
       shell: bash
       env:
         GPG_OPTIONS: "--batch --yes --no-tty --list-options no-show-photos --verify-options no-show-photos --pinentry-mode loopback"
         GPGKEY: ${{ inputs.gpg-key }}
         azure_blobs_token: ${{ inputs.azure-blobs-token }}
+        GITHUB_TOKEN: ${{ steps.pacman-repo-token.outputs.token }}
       run: |
         "$RUNNER_TEMP"/build-extra/pacman-helper.sh quick_add pkg-x86_64/*.tar.* pkg-i686/*.tar.* pkg-aarch64/*.tar.*
     - name: update check-run

.github/workflows/build-and-deploy.yml

@@ -306,13 +306,22 @@ jobs:
           name: artifacts
           path: artifacts
 
+      - uses: actions/create-github-app-token@v1
+        id: pacman-repo-token
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: pacman-repo
+
       - name: ${{ env.BUILD_ONLY == 'true' && 'Test-deploy' || 'Deploy' }} Pacman packages
         if: env.BUILD_ONLY == 'true' || env.azure_blobs_token != ''
         shell: bash
         env:
           GPGKEY: ${{secrets.GPGKEY}}
           PACMANDRYRUN: ${{env.BUILD_ONLY}}
           azure_blobs_token: ${{secrets.AZURE_BLOBS_TOKEN}}
+          GITHUB_TOKEN: ${{ steps.pacman-repo-token.outputs.token }}
         run: /usr/src/build-extra/pacman-helper.sh quick_add artifacts/*
 
       - name: Clean up temporary files