Version PRs don't trigger CI (GITHUB_TOKEN loop prevention) — needs PAT/App token or documented close-reopen #20

Both Version PRs so far (#7 was created manually for a different reason; #19 hit this directly) suffer from GitHub's loop prevention: branches/PRs pushed with the workflow's GITHUB_TOKEN do not trigger pull_request workflows, so required checks never run and the PR sits BLOCKED. Current workaround: close/reopen the PR as a real user, which re-triggers checks (verified working on #19).

Options, per changesets/action docs and community practice:

1. Create a fine-grained PAT (contents + pull-requests write on this repo), add as secret, pass to changesets/action as GITHUB_TOKEN env — Version PRs then trigger CI normally. Simplest; token rotation is the cost.
2. GitHub App installation token (e.g. via actions/create-github-app-token) — no personal token, more setup.
3. Keep the manual close/reopen dance documented in the release runbook — zero setup, small recurring friction (~monthly at this repo's cadence).

Ref: https://github.com/changesets/action#custom-tokens and https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow ("events triggered by the GITHUB_TOKEN ... will not create a new workflow run").