ci: fix @dependabot npm package-ecosystem x yarn integration

- https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#npm-registry

Signed-off-by: Lexus Drumgold <[email protected]>

Author: unicornware

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ on:
 permissions:
   packages: read
 env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN || secrets.GH_TOKEN }}
   HUSKY: 0
   REF: ${{ github.head_ref || github.ref_name }}
 concurrency:

.yarnrc.yml

@@ -21,7 +21,7 @@ nodeLinker: node-modules
 npmScopes:
   flex-development:
     npmAlwaysAuth: true
-    npmAuthToken: ${GITHUB_TOKEN}
+    npmAuthToken: ${GITHUB_TOKEN:-$GH_TOKEN}
     npmRegistryServer: https://npm.pkg.github.com
 
 patchFolder: ./patches

CONTRIBUTING.md

@@ -98,6 +98,7 @@ Follow the steps below to setup your local development environment:
 | name                    |
 | ----------------------- |
 | `CODECOV_TOKEN`         |
+| `GH_TOKEN`              |
 | `GITHUB_TOKEN`          |
 | `NODE_ENV`              |
 | `NODE_NO_WARNINGS`      |