ci: convert semantic-release to org setup

Author: drlkf

.github/workflows/semantic-release.yml

@@ -15,11 +15,19 @@ jobs:
         with:
           persist-credentials: false
 
+      - uses: npalm/app-token-action@v1
+        id: get-token
+        with:
+          appId: "${{ secrets.SEMANTIC_RELEASE_APP_ID }}"
+          appPrivateKeyBase64: "${{ secrets.SEMANTIC_RELEASE_PRIVATE_KEY_B64 }}"
+          appInstallationType: org
+          appInstallationValue: haskell-github-trust
+
       - name: Semantic release
         id: semantic
         uses: cycjimmy/semantic-release-action@v4
         env:
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          GH_TOKEN: ${{ steps.get-token.outputs.token }}
           HACKAGE_KEY: ${{ secrets.HACKAGE_TOKEN }}
 
         with: