Use create-github-app-token to get token for gen-lints

Author: lnicola

.github/workflows/gen-lints.yml

@@ -13,6 +13,8 @@ jobs:
   lints-gen:
     name: Generate lints
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
@@ -23,9 +25,16 @@ jobs:
       - name: Generate lints/feature flags
         run: cargo codegen lint-definitions
 
+      - uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          app-id: ${{ vars.APP_CLIENT_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Submit PR
         uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
         with:
+          token: ${{ steps.app-token.outputs.token }}
           commit-message: "internal: update generated lints"
           branch: "ci/gen-lints"
           delete-branch: true