ci(release-please): use sw-release-bot app token for PR creation

org-level policy blocks GITHUB_TOKEN from creating PRs;
use RELEASER_APP_ID / RELEASER_APP_PRIVATE_KEY app token
(same pattern as publish.yml in structured-world/repo)

Author: polaz

.github/workflows/release-please.yml

@@ -13,8 +13,16 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate release bot token
+        id: app-token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf
+        with:
+          app-id: ${{ secrets.RELEASER_APP_ID }}
+          private-key: ${{ secrets.RELEASER_APP_PRIVATE_KEY }}
+
       - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38  # v4
         id: rp
         with:
+          token: ${{ steps.app-token.outputs.token }}
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json