chore: swap release workflow to GH app (#569)

.github/workflows/release.yaml

@@ -82,6 +82,7 @@ jobs:
 
   push:
     runs-on: ubuntu-latest
+    environment: release
     needs: validate
     permissions:
       contents: write
@@ -103,6 +104,14 @@ jobs:
           name: build-artifacts
           path: build/
 
+      - name: Get Brew tap repo token
+        id: brew-tap-token
+        uses: peter-murray/workflow-application-token-action@dc0413987a085fa17d19df9e47d4677cf81ffef3 # v3.0.0
+        with:
+          application_id: ${{ secrets.HOMEBREW_TAP_WORKFLOW_GITHUB_APP_ID }}
+          application_private_key: ${{ secrets.HOMEBREW_TAP_WORKFLOW_GITHUB_APP_SECRET }}
+          organization: defenseunicorns
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
         with:
@@ -111,4 +120,4 @@ jobs:
           args: release --rm-dist --debug
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN}}
-          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.TAP_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.brew-tap-token.outputs.token }}