feature(ai-service): push on protected branch that required PR before…

… merging via GitHub APP as the bot (#88)

* upgrade the project version via GitHub APP

* demo github app as the committer

* demo github app as the committer v0.2.0-rc.1

* demo github app as the committer 0.2.0-rc.2

* demo github app as the committer 0.2.0-rc.3

* try to checkout repo with GitHub APP installation token

* failed case

* remove testing code

.github/workflows/ai-service-release-stable-image.yaml

@@ -16,11 +16,19 @@ jobs:
   upgrade-ai-service-version:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate a token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ vars.CI_APP_ID }}
+          private-key: ${{ secrets.CI_APP_PRIVATE_KEY }}
       - uses: actions/checkout@v4
+        with:
+          token: ${{ steps.generate-token.outputs.token }}
       - name: Set up Git
         run: |
+          git config --global user.name "wren-ai[bot]"
           git config --global user.email "[email protected]"
-          git config --global user.name "stable-release-bot"
       - name: Set up Python 3.12
         uses: actions/setup-python@v4
         with: