Use secret release app ID in release workflow

[juliusmarminge]

Summary

• Switch the release workflow to read RELEASE_APP_ID from secrets instead of repository variables.
• Keep the release app private key sourced from secrets as before.
• Align token minting with the existing secret-based release credential flow.

Testing

• Not run (workflow-only change).
• Reviewed .github/workflows/release.yml diff for the token minting input update.

Note

Read release app ID from secrets context in release workflow

Changes the app-id input for the 'Mint release app token' step in release.yml from vars.RELEASE_APP_ID to secrets.RELEASE_APP_ID, treating the app ID as a secret rather than a public variable.

^{Macroscope summarized e9de9fc.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 4c7c69ad-070e-4950-bb0c-79412bc941ac

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch t3code/fix-github-app-token

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}