fix(release): unblock automated bump-version PR creation

[devops-thiago]

Description

The bump-version job in .github/workflows/release.yml pushes chore/bump-* but gh pr create fails with:

GraphQL: GitHub Actions is not permitted to create or approve pull requests (createPullRequest)

The release still succeeds; only the post-release pom bump automation is incomplete.

Steps to Reproduce

1. Run gh workflow run release.yml -f version=v0.1.0 after a successful release pipeline merge.
2. Wait for the bump-version job.
3. Observe branch push succeeds but PR creation fails.

Expected Behavior

Release workflow opens (or updates) a bump PR moving main to the next -SNAPSHOT version without manual intervention.

Actual Behavior

Branch is pushed; PR must be opened manually. Operators must remember the close/reopen CI workaround.

Environment

• Repo: devops-thiago/ThrillhouseBot
• Workflow: .github/workflows/release.yml (bump-version job)
• Observed on release run 27453957100

Logs / Screenshots

pull request create failed: GraphQL: GitHub Actions is not permitted to create or approve pull requests (createPullRequest)
PR already exists

Proposed fix directions

• Use a GH_PAT secret with pull_requests: write scoped to a bot/machine user, or

• Document org setting change: Settings → Actions → General → allow GitHub Actions to create PRs, or

• Replace auto-PR with an issue creation + label notifying maintainers.

• I have searched for existing issues and this is not a duplicate.