ci: use PAT and force push for commit on release

[spoukke]

explanation here: https://github.com/stefanzweifel/git-auto-commit-action#push-to-protected-branches