fix: use BUMPY_GH_TOKEN for draft release operations

The draft release functions (createDraftRelease, updateReleaseBody,
finalizeRelease, deleteRelease) were not using withReleaseToken, so
GitHub release events were created with GITHUB_TOKEN which doesn't
trigger downstream workflows like on-release.yaml.

Author: theoephraim

.bumpy/disable-staged-publishing.md

@@ -2,4 +2,4 @@
 '@varlock/bumpy': patch
 ---
 
-Disable npm staged publishing — feature is not yet ready for production use. Removes `npmStaged` config and the npm upgrade step from the release workflow.
+Disable npm staged publishing — feature is not yet ready for production use. Removes `npmStaged` config and the npm upgrade step from the release workflow. Also fix draft release functions (`createDraftRelease`, `updateReleaseBody`, `finalizeRelease`, `deleteRelease`) to use `BUMPY_GH_TOKEN` via `withReleaseToken` so that GitHub release events trigger downstream workflows.

packages/bumpy/src/core/github-release.ts

@@ -291,22 +291,22 @@ export async function createDraftRelease(
 ): Promise<void> {
   const args = ['gh', 'release', 'create', tag, '--title', title, '--notes', body, '--draft'];
   if (targetSha) args.push('--target', targetSha);
-  await runArgsAsync(args, { cwd: rootDir });
+  await withReleaseToken(() => runArgsAsync(args, { cwd: rootDir }));
 }
 
 /** Update an existing GitHub release's body */
 export async function updateReleaseBody(tag: string, body: string, rootDir: string): Promise<void> {
-  await runArgsAsync(['gh', 'release', 'edit', tag, '--notes', body], { cwd: rootDir });
+  await withReleaseToken(() => runArgsAsync(['gh', 'release', 'edit', tag, '--notes', body], { cwd: rootDir }));
 }
 
 /** Finalize a draft release (remove draft status) */
 export async function finalizeRelease(tag: string, rootDir: string): Promise<void> {
-  await runArgsAsync(['gh', 'release', 'edit', tag, '--draft=false'], { cwd: rootDir });
+  await withReleaseToken(() => runArgsAsync(['gh', 'release', 'edit', tag, '--draft=false'], { cwd: rootDir }));
 }
 
 /** Delete a GitHub release */
 export async function deleteRelease(tag: string, rootDir: string): Promise<void> {
-  await runArgsAsync(['gh', 'release', 'delete', tag, '--yes'], { cwd: rootDir });
+  await withReleaseToken(() => runArgsAsync(['gh', 'release', 'delete', tag, '--yes'], { cwd: rootDir }));
 }
 
 /** Find draft releases for a package (by name prefix) that are older than the current version */