ci(release): pass the minted GitHub App token to release-please

[gabrielfrasantos]

Mirrors embedded-pro/numerical-toolbox-cpp#342 (issue embedded-pro/numerical-toolbox-cpp#338).

release-please.yml mints an app token (steps.token) but passes secrets.RELEASE_PLEASE_TOKEN to release-please, so the app step does nothing. This PR uses ${{ steps.token.outputs.token }} instead. Release PRs are then opened by the app and trigger CI, and the RELEASE_PLEASE_TOKEN PAT secret can be retired once this is merged.

🤖 Generated with Claude Code

https://claude.ai/code/session_01N4pngRiBqeb1xiseKXNLG6

---

Generated by Claude Code

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	7		0		0	0.62s
✅ CPP	clang-format	35	0	0		0	0.66s
✅ CPP	cppcheck	35		0		0	1.05s
✅ DOCKERFILE	hadolint	1		0		0	0.58s
✅ JSON	jsonlint	8		0		0	0.11s
✅ JSON	prettier	8	2	0		0	0.37s
✅ MARKDOWN	markdownlint	131	0	0		0	2.02s
✅ MARKDOWN	markdown-table-formatter	131	0	0		0	0.19s
⚠️ SPELL	lychee	165		2		0	1.77s
✅ YAML	prettier	12	0	0		0	0.53s
✅ YAML	yamllint	12		0		0	0.59s

Detailed Issues

⚠️ SPELL / lychee - 2 errors

[ERROR] failed to verify TLS certificate: invalid peer certificate: UnknownIssuer
📝 Summary
---------------------
🔍 Total..........104
🔗 Unique..........42
✅ Successful......92
⏳ Timeouts.........0
🔀 Redirected.......5
👻 Excluded.........9
❓ Unknown..........0
🚫 Errors...........2
⛔ Unsupported......2

Errors in .github/workflows/static-analysis.yml
[403] https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-$ (at 37:21) | Rejected status code: 403 Forbidden

Errors in doc/kinematics/InverseKinematics.md
[ERROR] https://mathweb.ucsd.edu/~sbuss/ResearchWeb/ikmethods/iksurvey.pdf (at 124:169) | SSL certificate not trusted. Use --insecure if site is trusted

Hint: Followed 5 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_GITLEAKS, REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,CPP_CPPCHECK,CPP_CLANG_FORMAT,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT

Show us your support by starring ⭐ the repository

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud