ci(release-please): author release PR via RELEASE_PLEASE_TOKEN to avoid the workflow-approval gate

GitHub forces a manual "approve workflows" gate on PRs created by the default
GITHUB_TOKEN (release-please's release PR), so its CI never runs until approved
by hand. Prefer a real-identity token (RELEASE_PLEASE_TOKEN secret) so the PR is
authored by a user and its CI runs automatically; fall back to GITHUB_TOKEN when
the secret is absent so the workflow never breaks.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012CyiRqk2DVwmJjEu5gcD1m

Author: pmaxhogan

.github/workflows/release-please.yml

@@ -24,5 +24,11 @@ jobs:
     steps:
       - uses: googleapis/release-please-action@v4
         with:
+          # Prefer a PAT / App token (RELEASE_PLEASE_TOKEN) so the release PR is
+          # authored by a real identity and its CI runs WITHOUT the manual
+          # "approve workflows" gate GitHub forces on GITHUB_TOKEN-created PRs.
+          # Falls back to GITHUB_TOKEN when the secret is absent (current
+          # behaviour, approval still required) so the workflow never breaks.
+          token: ${{ secrets.RELEASE_PLEASE_TOKEN || secrets.GITHUB_TOKEN }}
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json