cdk publish: add required token to commit to master and --no-cache fo…

…r getting just-published version from pypi (#36864)

.github/workflows/publish-cdk-command-manually.yml

@@ -97,7 +97,7 @@ jobs:
         with:
           repository: ${{ github.event.inputs.repo }}
           ref: ${{ github.event.inputs.gitref }}
-          token: ${{ secrets.GH_PAT_MAINTENANCE_OSS }}
+          token: ${{ secrets.GH_PAT_MAINTENANCE_OSS }} # This token is what allows us to commit directly to master
       - name: "Publish Python CDK: bump Poetry package version"
         id: bumpversion
         run: |
@@ -206,10 +206,12 @@ jobs:
         with:
           repository: ${{ github.event.inputs.repo }}
           ref: ${{ github.event.inputs.gitref }}
+          token: ${{ secrets.GH_PAT_MAINTENANCE_OSS }} # This token is what allows us to commit directly to master
       - name: Bump CDK dependency of source-declarative-manifest
         run: |
           cd airbyte-integrations/connectors/source-declarative-manifest
-          poetry add airbyte-cdk==${{needs.bump-version.outputs.new_cdk_version}}
+          # --no-cache is used to ensure the latest version is fetched. Let's see if we need to add a wait...
+          poetry add airbyte-cdk==${{needs.bump-version.outputs.new_cdk_version}} --no-cache
       - name: Bump version of source-declarative-manifest
         uses: ./.github/actions/run-airbyte-ci
         with: