fix: Use a token that can access the target repo when performing actions there

Author: smockle

.github/workflows/test.yml

@@ -87,7 +87,7 @@ jobs:
       - name: Add PR URLs to findings
         uses: actions/github-script@v8
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GH_TOKEN }}
           script: |
             const fs = require('fs');
             if (!process.env.FINDINGS_PATH || !fs.existsSync(process.env.FINDINGS_PATH)) {
@@ -160,7 +160,7 @@ jobs:
                 fi
               done
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
 
       - name: Clean up cached findings
         if: ${{ always() }}