feat(github): share the release app credentials with provider repos

[thecluster-claude]

Adds the organization variable RELEASE_APP_CLIENT_ID and secret RELEASE_APP_PRIVATE_KEY, visible to the Terraform provider repos.
unmango/actions' release-please workflow uses them to mint an app token, so the release tag starts the goreleaser workflow; a tag pushed with GITHUB_TOKEN does not.

The app is thecluster-bot (client ID Iv1.47021fc88c227144), which is installed on every unmango repository with contents, pull-requests, and issues write.
containers and actions already use it through the same names, set by hand as repo secrets and variables.

Before this can merge

Draft until thecluster-bot's private key is in the stack config:

pulumi config set --secret releaseAppPrivateKey < path/to/thecluster-bot.private-key.pem

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 043cc3cb-0b84-4c9c-b843-f2e080a39485

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}