fix: keep Actions pull request creation enabled

[loadinglucian]

Summary

The watcher failed this morning (run 30987026534, issue #63) because it could not open its daily evidence-record PR: GitHub Actions is not permitted to create or approve pull requests.

Root cause: scripts/configure-github-autorelease sets the workflow-permissions flag can_approve_pull_request_reviews to false. Despite its name, that flag governs the combined GitHub setting "Allow GitHub Actions to create and approve pull requests", so re-running the configure script during the ruleset migration (#61) switched off PR creation for GITHUB_TOKEN in both repos. The watcher's evidence-record PRs and the mise-php consumer's readiness PRs both depend on it, as documented in docs/repository-settings.md ("Keep the default Actions token read-only while enabling automation PR creation").

Changes

• scripts/configure-github-autorelease: set the flag to true with a comment explaining that it also governs PR creation. Approvals remain owner-only through the ruleset and protected controls, and runtime workflows never submit approving reviews.
• docs/admin-state/php-bin-after.json: regenerated with scripts/snapshot-github-admin-state after restoring the live setting.

The live setting has already been restored on both repos; a companion PR updates the mise-php snapshot.

Summary by CodeRabbit

• Chores
  • Updated automated workflow permissions to support pull request review approvals.
  • Existing approval restrictions remain unchanged.
  • Refreshed the associated administrative state metadata.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0ca8f2a6-372b-4396-b248-06e745395369

📥 Commits

Reviewing files that changed from the base of the PR and between 5adef4c and 3c5d501.

📒 Files selected for processing (2)

• docs/admin-state/php-bin-after.json
• scripts/configure-github-autorelease

---

📝 Walkthrough

Walkthrough

The autorelease workflow now enables pull-request review approval. The admin-state snapshot records the updated permission, timestamp, and digest.

Changes

Autorelease permission update

Layer / File(s)	Summary
Enable review approval and refresh snapshot scripts/configure-github-autorelease, docs/admin-state/php-bin-after.json	The workflow configuration enables can_approve_pull_request_reviews. The admin-state snapshot records the same permission, a new timestamp, and a new digest.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• Bigpixelrocket/php-bin#32: Enables the GitHub Actions permission to approve pull-request reviews.
• Bigpixelrocket/php-bin#56: Updates autorelease workflow permission configuration for pull-request review approval.
• Bigpixelrocket/php-bin#61: Modifies autorelease configuration and admin-state workflow permissions.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the main change: preserving GitHub Actions pull request creation.
Description check	✅ Passed	The description clearly explains the failure, root cause, changes, and affected workflows, but it omits the template's Verification and Security sections.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/allow-actions-pr-creation

---

_{Comment @coderabbitai help to get the list of available commands.}