Fix Homebrew tap token for GoReleaser

Add HOMEBREW_TAP_GITHUB_TOKEN to goreleaser config and release workflow
so GoReleaser can push the formula to sns45/homebrew-tap. The default
GITHUB_TOKEN lacks cross-repo write access.

Author: sns45

.github/workflows/release.yml

@@ -31,6 +31,7 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
 
       # Dogfood: full pipeline against reference project + sign the binary
       - name: Build forgeseal for dogfooding

.goreleaser.yaml

@@ -38,6 +38,7 @@ brews:
     repository:
       owner: sns45
       name: homebrew-tap
+      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
     homepage: "https://github.com/sns45/forgeseal"
     description: "Supply chain security for JavaScript and TypeScript projects"
     license: "Apache-2.0"