update-CI: fix the token usage

Author: ulysses4ever

.github/workflows/update-haskell-ci-on-tested-with-pr.yml

@@ -65,6 +65,7 @@ jobs:
         with:
           # Checkout the PR head branch so we can commit back to it
           ref: ${{ github.head_ref }}
+          token: ${{ secrets.WORKFLOW_TOKEN }}   # PAT with workflow + contents/write
 
       # Haskell-specific: install haskell-ci from source and regenerate workflows
       - name: Set up Haskell toolchain
@@ -107,7 +108,6 @@ jobs:
         with:
           commit_message: "chore(ci): regenerate Haskell-CI from a tested-with PR"
           branch: ${{ github.head_ref }}
-          token: ${{ secrets.WORKFLOW_TOKEN }}   # PAT with workflow + contents/write
           file_pattern: |
             .github/workflows/**
             .haskell-ci