chore: move to environment secrets

[cplee]

• Remove GORELEASER_GITHUB_TOKEN secret. Instead, use the GITHUB_TOKEN to manage releases by adding permissions to the token
• Use new GH_ACT_TOKEN secret defined in the release environment. This is a fine grained token with access to the nektos/gh-act repo only

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	4		0	0.01s
✅ REPOSITORY	gitleaks	yes		no	2.42s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	10.34s
✅ REPOSITORY	secretlint	yes		no	1.19s
✅ REPOSITORY	trivy-sbom	yes		no	0.11s
✅ REPOSITORY	trufflehog	yes		no	5.36s
⚠️ YAML	prettier	3		1	0.31s
✅ YAML	v8r	3		0	2.45s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.58%. Comparing base (5a80a04) to head (12520ce).
Report is 165 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2653      +/-   ##
==========================================
+ Coverage   61.56%   68.58%   +7.02%     
==========================================
  Files          53       72      +19     
  Lines        9002    11046    +2044     
==========================================
+ Hits         5542     7576    +2034     
+ Misses       3020     2900     -120     
- Partials      440      570     +130     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[ChristopherHX]

looks good to me now, while there is still a little possibility something is going to break on attempt 1