ci: use electron/secret-service action

Author: dsanders11

.github/workflows/release.yml

@@ -17,9 +17,6 @@ jobs:
     environment: npm
     permissions:
       id-token: write # for publishing releases
-      contents: write # for making github release
-      pull-requests: write # for commenting release version
-      issues: write # for commenting release version
     steps:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
@@ -31,7 +28,10 @@ jobs:
           node-version: '24.x'
       - name: Install
         run: yarn install --immutable
+      - name: Get GitHub app token
+        id: secret-service
+        uses: electron/secret-service@41b5bb0905f25df732f1808ea1a65719fbe1b15b
       - name: Run semantic release
         uses: electron/semantic-trusted-release@5eceb399ac8de8863205cf6e34109bce473ba566 # v1.0.1
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ fromJSON(steps.secret-service.secrets).GITHUB_TOKEN }}