use separate github token

.github/workflows/release.yml

@@ -2,7 +2,7 @@ name: Release
 
 on:
     # TODO @tom2drum: remove PR trigger
-    pull_request:
+    # pull_request:
     release:
         types: [ released, prereleased ]
 
@@ -15,7 +15,8 @@ jobs:
         name: Label released issues
         uses: './.github/workflows/label-released-issues.yml'
         secrets: inherit
-        if: ${{ github.event.action == 'released' }}
+        # TODO @tom2drum: uncomment condition
+        # if: ${{ github.event.action == 'released' }}
     update_project_cards:
         name: Update project tasks statuses
         needs: label_released_issues

.github/workflows/update-project-cards.yml

 name: Update project cards for issues
 
 on:
-    # pull_request:
+    pull_request:
     workflow_dispatch:
         inputs:
             project_name:
@@ -61,6 +61,7 @@ jobs:
                     FIELD_VALUE: ${{ github.event.pull_request && 'Released'  || github.event.inputs.field_value }}
                 with:
                     debug: true
+                    github-token: ${{ secrets.BOT_LABEL_ISSUE_TOKEN }}
                     script: |
                         const response = await github.graphql(`
                             query ($login: String!, $q: String!) {
@@ -143,6 +144,7 @@ jobs:
                     ISSUES: ${{ github.event.pull_request && '[900,903,899,912]' || github.event.inputs.issues }}
                 with:
                     debug: true
+                    github-token: ${{ secrets.BOT_LABEL_ISSUE_TOKEN }}
                     script: |
                         const result = [];
                         const issues = JSON.parse(process.env.ISSUES);
@@ -208,6 +210,7 @@ jobs:
                     FIELD_VALUE_ID: ${{ steps.project_info.outputs.field_value_id }}
                 with:
                     debug: true
+                    github-token: ${{ secrets.BOT_LABEL_ISSUE_TOKEN }}
                     script: |
                         const items = JSON.parse(process.env.ITEMS);