build(ci): use a dedicated PAT to publish on GPR