Use internal bot for versioning (#643)

* Use internal bot for versioning

* tweak `CODEOWNERS`

.github/workflows/publish.yml

@@ -16,6 +16,7 @@ jobs:
   version:
     name: Version
     runs-on: ubuntu-latest
+    environment: version
     timeout-minutes: 20
     outputs:
       hasChangesets: ${{ steps.changesets.outputs.hasChangesets }}
@@ -36,10 +37,17 @@ jobs:
       - name: Build
         run: pnpm build
 
+      - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        id: app-token
+        with:
+          client-id: ${{ vars.APP_CLIENT_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Create or update release pull request
         id: changesets
         uses: ./
         with:
+          github-token: ${{ steps.app-token.outputs.token }}
           version: pnpm bump
 
   publish: