fix(ci): use custom token for releases (#2191)

Author: nhtyy

.github/workflows/docker-publish-gnark.yml

@@ -2,8 +2,9 @@
 name: Docker Publish Gnark
 
 on:
-  release:
-    types: [published]
+  push:
+    tags:
+      - "v*.*.*"
   schedule:
     - cron: "0 0 * * *"
   workflow_dispatch:

.github/workflows/docker-publish.yml

@@ -3,8 +3,9 @@
 name: Docker Publish CLI
 
 on:
-  release:
-    types: [published]
+  push:
+    tags:
+      - "v*.*.*"
   schedule:
     - cron: "0 0 * * *"
   # Trigger without any parameters a proactive rebuild

.github/workflows/release.yml

@@ -49,7 +49,7 @@ jobs:
       - name: Create release
         id: create_release
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.SP1_RELEASE_TOKEN }}
         run: |
           GH_DEBUG=api gh release create ${{ steps.release_info.outputs.tag_name }} --target main --generate-notes --latest=false
 
@@ -202,7 +202,7 @@ jobs:
       - name: Upload Release artifact
         id: upload_release_artifact
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.SP1_RELEASE_TOKEN }}
         run: |
           gh release upload ${{ needs.prepare.outputs.tag_name }} ${{ steps.artifacts.outputs.file_name }}
 
@@ -216,7 +216,7 @@ jobs:
 
       - name: Set latest release
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.SP1_RELEASE_TOKEN }}
         run: |
           # Wait until all the binaries have been built to set the latest release.
           gh release edit ${{ needs.prepare.outputs.tag_name }} --latest
@@ -320,6 +320,6 @@ jobs:
 
       - name: Delete failed release
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.SP1_RELEASE_TOKEN }}
         run: |
           gh release delete ${{ needs.prepare.outputs.tag_name }} --cleanup-tag