[failproofai-505] Fix auto-bump token repository scope

[NiveditJain]

Summary

• scope the version-bot installation token to FailproofAI/platform
• allow checkout and push access to the private platform repository
• retain least-privilege repository targeting

Validation

• git diff --check
• verified owner and repositories inputs against actions/create-github-app-token@v2 action metadata

Summary by CodeRabbit

• Chores
  • Updated automated workflow authentication to use a token scoped specifically to the platform repository.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 8be9d205-8429-47be-a346-f9305c742e03

📥 Commits

Reviewing files that changed from the base of the PR and between 9220392 and 69dec47.

📒 Files selected for processing (1)

• .github/workflows/bump-platform-submodule.yml

---

📝 Walkthrough

Walkthrough

The submodule bump workflow now explicitly scopes its generated GitHub App token to the FailproofAI/platform repository.

Changes

Platform token scoping

Layer / File(s)	Summary
Token repository scope .github/workflows/bump-platform-submodule.yml	The “Mint version-bot app token” step sets owner: FailproofAI and repositories: platform.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• FailproofAI/failproofai#394: Updates authentication and token usage in the same submodule bump workflow.
• FailproofAI/failproofai#504: Adjusts version-bot token authentication in the same workflow.

Suggested reviewers: hermes-exosphere

Poem

I’m a bunny with a token in sight,
Scoped to one platform, tidy and right.
The workflow hops, the settings align,
Submodule bumps now follow the line.
One repo, one token—what a design!

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR is missing the required Description, Type of Change, and Checklist sections from the template.	Add the template's Description, Type of Change checkboxes, and checklist items with their statuses, or note if they were not run.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly matches the token-scoping change and is concise.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[hermes-exosphere]

LGTM! Scopes the version-bot token to FailproofAI/platform so it can actually checkout the private submodule. All CI green.