ci: use obltmachine for tagging and creating the release in the relea…

…se workflow (#948)

* Use obltmachine for tagging in the release workflow

* Add missing places where we need to use the PAT

.github/workflows/release.yml

@@ -15,7 +15,6 @@ on:
         default: false
 
 permissions:
-  contents: write # needed to push the tag and create the release
   id-token: write # to enable use of OIDC for npm provenance
 
 jobs:
@@ -27,7 +26,11 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: elastic/apm-pipeline-library/.github/actions/setup-git@current
+          token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
+
+      - uses: elastic/oblt-actions/git/setup@v1
+        with:
+          github-token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
       - run: npm ci # runs npm prepublish
 
       - name: configure NPMJS token
@@ -36,7 +39,7 @@ jobs:
       - run: npx semantic-release --dry-run="${DRY_RUN}"
         env:
           DRY_RUN: ${{ github.event.inputs.dry-run }}
-          GITHUB_TOKEN: ${{ github.token }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
 
       - name: Get version and package name
         run: |