fix(ci): remove PAT dependency from release workflow checkouts

.github/workflows/dev-release.yml

@@ -26,8 +26,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          # Prefer PAT when available (workflow-trigger compatibility), but never hard-fail when PAT is missing/expired.
+          # Always use the built-in workflow token; PAT rotation/breakage must not block dev releases.
-          token: ${{ secrets.PAT_TOKEN != '' && secrets.PAT_TOKEN || github.token }}
+          token: ${{ github.token }}
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2

.github/workflows/release.yml

@@ -20,8 +20,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          # Prefer PAT when available (workflow-trigger compatibility), but never hard-fail when PAT is missing/expired.
+          # Always use the built-in workflow token; PAT rotation/breakage must not block releases.
-          token: ${{ secrets.PAT_TOKEN != '' && secrets.PAT_TOKEN || github.token }}
+          token: ${{ github.token }}
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/sync-dev-after-release.yml

@@ -20,8 +20,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          # Prefer PAT when available, but fall back to built-in token to avoid hard dependency on PAT rotation.
+          # Always use built-in workflow token so PAT rotation never breaks sync jobs.
-          token: ${{ secrets.PAT_TOKEN != '' && secrets.PAT_TOKEN || github.token }}
+          token: ${{ github.token }}
 
       - name: Configure Git
         run: |