ci(release): enable force push to protected release branches (#3309)

* ci(release): use secret to check out

So that release workflow can push/force push to protected branches

* ci(release): force push release version commit

So we can bypass protected branch rules

(cherry picked from commit 4aa01d6)

.github/workflows/RELEASE.yaml

@@ -14,6 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
+          token: ${{ secrets.PROTECTED_BRANCH_PAT }}
           ref: ${{ github.event.release.target_commitish }}
           fetch-depth: 0
 
@@ -247,7 +248,7 @@ jobs:
       - name: Commit and tag
         run: |
           git commit -am "ci: release version ${RELEASE_VERSION}"
-          git push origin ${RELEASE_BRANCH}
+          git push --force origin ${RELEASE_BRANCH}
           git tag -fa ${RELEASE_VERSION} -m "ci: release version ${RELEASE_VERSION}"
           git push --force origin ${RELEASE_VERSION}