This GitHub app provides a token to the release-please GH action so that we can continue to use release please and avoid having to maintain PATs as their lifetimes is being reduced.

Ref
https://github.com/actions/create-github-app-token

Ultimately, the private key (pem) for this app should be stored in AKV and accessed via OIDC

https://learn.microsoft.com/en-us/azure/developer/github/github-actions-key-vault