fix: checkout should use the same token as semantic release

Author: bruzina

.github/workflows/semantic-release.yaml

@@ -28,9 +28,18 @@ jobs:
       USE_GH_APP: ${{ inputs.GH_APP_ID && secrets.GH_APP_PEM_FILE }}
 
     steps:
+      - name: Create GitHub App token
+        uses: actions/create-github-app-token@v2
+        id: gh-app-token
+        if: env.USE_GH_APP
+        with:
+          app-id: ${{ inputs.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PEM_FILE }}
+
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
+          token: ${{ steps.gh-app-token.outputs.token || secrets.GH_TOKEN || secrets.GITHUB_TOKEN }}
           fetch-depth: 0
 
       - name: Setup Node.js
@@ -51,14 +60,6 @@ jobs:
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
         run: npm audit signatures
 
-      - name: Create GitHub App token
-        uses: actions/create-github-app-token@v2
-        id: gh-app-token
-        if: env.USE_GH_APP
-        with:
-          app-id: ${{ inputs.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PEM_FILE }}
-
       - name: Run Semantic Release
         env:
           GITHUB_TOKEN: ${{ steps.gh-app-token.outputs.token || secrets.GH_TOKEN || secrets.GITHUB_TOKEN }}