switch winget PR creation from Octo STS to PAT

[pritt20]

Description

The update-winget job was failing at PR creation with Resource not accessible by integration. Root cause: Octo STS mints GitHub App installation tokens, and a GitHub App can only open PRs where it is installed on the base repo. Since we can't install our App on microsoft/winget-pkgs, PR creation always fails.

Switching to a user-scoped PAT resolves issue where any authenticated user can open PRs to public upstream repos from a fork.

🎟 Issue(s)

Related #XXX

🧪 Functional Testing

List the functional testing steps to confirm this feature or fix.

📸 Screenshots

Add screenshots to illustrate the validity of these changes.

📋 Checklist

• Rebased from the main (or release if patching) branch (before testing)
• Ran make test before taking out of draft
• Ran make lint before taking out of draft
• Added/updated applicable tests
• Tested against Astro-API (if necessary).
• Tested against Houston-API and Astronomer (if necessary).
• Communicated to/tagged owners of respective clients potentially impacted by these changes.
• Updated any related documentation

[coveralls-official]

Coverage Report for CI Build 30630853371

Coverage remained the same at 43.896%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	59030
Covered Lines:	25912
Line Coverage:	43.9%
Coverage Strength:	8.66 hits per line

---

💛 - Coveralls