Pass explicit token in auto-merge-dependabot

Author: endrju19

.github/workflows/ci.yml

@@ -5,9 +5,6 @@ on:
   push:
     branches: ['**']
     tags: [v*]
-permissions:
-  contents: write
-  pull-requests: write
 jobs:
   build:
     # run on 1) push, 2) external PRs, 3) softwaremill-ci PRs
@@ -101,8 +98,6 @@ jobs:
     if: github.event.pull_request.user.login == 'softwaremill-ci'
     needs: [ build, label ]
     uses: softwaremill/github-actions-workflows/.github/workflows/auto-merge.yml@main
-    secrets:
-      github-token: ${{ secrets.SOFTWAREMILL_CI_PR_TOKEN }}
 
   auto-merge-dependabot:
     # only for PRs by dependabot[bot]