Feature/ci bot

[amithad]

Description

CI pipeline updates to use a app

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional changes)
• Performance improvement
• Test update
• CI/CD update
• Other (please describe):

Related Issues

Fixes #
Relates to #

Changes Made

• Updated the workflows to use the app. Added a test workflow to fix the problems

Testing

• Unit tests pass locally
• Integration tests pass locally
• Manual testing completed
• New tests added for changes

Checklist

• My code follows the project's style guidelines
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published

Screenshots (if applicable)

Additional Notes

[Copilot]

Pull Request Overview

This PR migrates from using a Personal Access Token (MODULE_SYNC_TOKEN) to GitHub App authentication across multiple workflows. This change improves security by using short-lived, scoped tokens instead of long-lived PATs, and updates the git commit identity from generic github-actions bot to a custom agent-kernel-ci bot.

• Replaces MODULE_SYNC_TOKEN secret with GitHub App authentication (APP_ID and APP_PRIVATE_KEY)
• Updates git user configuration from github-actions[bot] to agent-kernel-ci[bot]
• Adds a new test workflow to validate GitHub App configuration

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File	Description
.github/workflows/test.yaml	Adds GitHub App token generation step for lock file updates, replaces PAT with app token
.github/workflows/test-github-app.yaml	New workflow to test GitHub App authentication and secret configuration
.github/workflows/sync-terraform.yaml	Adds GitHub App token generation for multi-repo sync operations, updates git user identity
.github/workflows/publish.yaml	Migrates to GitHub App authentication for version bumps and releases, updates git user identity

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.