Merge pull request #2085 from guardian/akash1810-patch-1

cd: Use the `guardian-ci` user to author automatic PRs

Author: akash1810

.github/workflows/cd.yaml

@@ -43,7 +43,11 @@ jobs:
           commit: "Bump package version"
 
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # This action will raise a PR to edit package.json and package-lock.json.
+          # PRs raised by the default `secrets.GITHUB_TOKEN` will not trigger CI, so we need to provide a different token.
+          # This is a PAT for the guardian-ci user.
+          # See https://docs.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
+          GITHUB_TOKEN: ${{ secrets.GU_GUARDIAN_CI_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Release docs