chore(main): switch release‑please to use a GitHub App token

Use the actions/create‑github‑app‑token action to generate a token with write‑contents permission for the Homebrew tap repository. This replaces the TAP_GITHUB_TOKEN secret and ensures the release workflow has the necessary permissions to push to the tap.

Author: koki-develop

.github/workflows/release-please.yml

@@ -43,9 +43,15 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - uses: ./.github/actions/setup
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
+        id: app-token
+        with:
+          app-id: ${{ secrets.HOMEBREW_TAP_APP_ID }}
+          private-key: ${{ secrets.HOMEBREW_TAP_APP_PRIVATE_KEY }}
+          permission-contents: write
 
       - name: release
         run: goreleaser release --clean
         env:
           GITHUB_TOKEN: ${{ github.token }}
-          TAP_GITHUB_TOKEN: ${{ secrets.TAP_GITHUB_TOKEN }}
+          TAP_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}