ci: remove need for custom PAT for release branch workflow (aws#2126)

The token from GitHub Actions is sufficient

Author: rli

.github/workflows/create-release-candidate-branch.yml

@@ -28,14 +28,15 @@ jobs:
     setupRcBranch:
         name: Set up a Release Candidate Branch
         runs-on: ubuntu-latest
+        permissions:
+            contents: write
 
         steps:
             - name: Sync code
               uses: actions/checkout@v4
               with:
                   ref: ${{ inputs.commitId }}
-                  # Use RELEASE_CANDIDATE_BRANCH_CREATION_PAT to ensure workflow triggering works
-                  token: ${{ secrets.RELEASE_CANDIDATE_BRANCH_CREATION_PAT }}
+                  token: ${{ secrets.GITHUB_TOKEN }}
                   persist-credentials: true
 
             - name: Setup Node.js
@@ -109,15 +110,8 @@ jobs:
               env:
                   BRANCH_NAME: ${{ steps.release-branch.outputs.BRANCH_NAME }}
                   RELEASE_VERSION: ${{ steps.release-version.outputs.RELEASE_VERSION }}
-                  # We use the toolkit-automation account, basically something that
-                  # isn't the default GitHub Token, because you cannot chain actions with that.
-                  # In our case, after pushing a commit (below), we want create-agent-standalone.yml
-                  # to start automatically.
-                  REPO_PAT: ${{ secrets.RELEASE_CANDIDATE_BRANCH_CREATION_PAT }}
               run: |
                   git config --global user.email "<>"
                   git config --global user.name "aws-toolkit-automation"
-                  # Configure git to use the PAT token for authentication
-                  git remote set-url origin "https://x-access-token:${REPO_PAT}@github.com/${{ github.repository }}.git"
-                  git commit -m "chore: bump agentic version: $RELEASE_VERSION"
+                  git commit --no-verify -m "chore: bump agentic version: $RELEASE_VERSION"
                   git push --set-upstream origin "$BRANCH_NAME"