CI: support synch between public and private repo

[JPPortier]

No description provided.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA cb144b0.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/sync-from-public.yml

Package	Version	License	Issue Type
actions/create-github-app-token	3.*.*	Null	Unknown License

Scanned Manifest Files

.github/workflows/sync-from-public.yml

• actions/create-github-app-token@3.*.*