Use a separate gh token for master branch promotion so workflows run

.github/workflows/promote.yml

@@ -3,9 +3,6 @@ name: Promote Stable Release
 on:
   workflow_dispatch:
 
-permissions:
-  contents: write
-
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -13,8 +10,13 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Fast-forward master branch
         run: |
           git checkout master
           git merge develop --ff-only
-          git push origin master
+      - name: Push
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.MASTER_TOKEN }}
+          branch: master