chore: new attempt

.github/workflows/ai-flag-cleanup-pr.yml

@@ -58,12 +58,13 @@ jobs:
           ref:                 ${{ github.ref }}
           token:               ${{ steps.app_token.outputs.token }}
           fetch-depth:         0
-          persist-credentials: true
+          persist-credentials: false
 
       - name: Get issue
         uses: actions/github-script@v7
         id: get_issue
         with:
+          github-token: ${{ steps.app_token.outputs.token }}
           script: |
             console.log('Fetching issue #${{ inputs.issue-number }}')
             const { owner, repo } = context.repo;
@@ -97,6 +98,7 @@ jobs:
         env:
           FLAG_NAME: ${{ steps.extract_flag.outputs.flag-name }}
         with:
+          github-token: ${{ steps.app_token.outputs.token }}
           result-encoding: string
           script: |
             const kebab = (s) => s
@@ -138,7 +140,7 @@ jobs:
           ref:                 ${{ steps.create_branch.outputs.result }}
           token:               ${{ steps.app_token.outputs.token }}
           fetch-depth:         0
-          persist-credentials: true
+          persist-credentials: false
 
       - name: Configure Git
         env:
@@ -164,11 +166,8 @@ jobs:
           echo "file_list=./file_list.bin" >> $GITHUB_OUTPUT
 
       - name: Create prompt
-        uses: actions/github-script@v7
         id: create_prompt
-        with:
-          result-encoding: string
-          script: |
+        run: |
           const body = `${{ fromJson(steps.get_issue.outputs.result).body }}`;
           return `Based on the issue description below, refactor the codebase to permanently apply the desired outcome for this feature flag (e.g. enable, keep variant, or discard), by removing all conditional checks and dead branches, preserving only the correct code path.
 
@@ -243,6 +242,7 @@ jobs:
       - name: Create Pull Request
         uses: actions/github-script@v7
         with:
+          github-token: ${{ steps.app_token.outputs.token }}
           result-encoding: string
           script: |
             const { owner, repo } = context.repo;