Update GitHub token input to require CUSTOM_GH_TOKEN for authentication in workflows

.github/actions/runner-fallback/action.yml

@@ -11,9 +11,11 @@ inputs:
     description: 'Comma-separated label list or single label for the fallback (e.g. "ubuntu-latest")'
     required: true
   github-token:
-    description: "PAT or GITHUB_TOKEN with `repo` scope"
+    description: 'GitHub token with repo admin read permissions'
     required: true
 
+  
+
 outputs:
   use-runner:
     description: "JSON array of labels you can feed straight into runs-on"

.github/workflows/docs-and-testcov.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           primary-runner: "self-hosted"
           fallback-runner: "ubuntu-latest"
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.CUSTOM_GH_TOKEN }}
 
   docs-and-testcov:
     needs: pick-runner

.github/workflows/run-benchmarks.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           primary-runner: "self-hosted"
           fallback-runner: "ubuntu-latest"
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.CUSTOM_GH_TOKEN }}
 
   run-benchmarks:
     needs: pick-runner

.github/workflows/run-unit-tests.yml

@@ -12,18 +12,22 @@ concurrency:
 
 jobs:
   pick-runner:
+
     if: github.event.pull_request.draft == false
+
     runs-on: ubuntu-latest
     outputs:
       runner: ${{ steps.choose.outputs.use-runner }}
     steps:
+
       - uses: actions/checkout@v4
       - id: choose
         uses: ./.github/actions/runner-fallback
         with:
           primary-runner: "self-hosted"
           fallback-runner: "ubuntu-latest"
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.CUSTOM_GH_TOKEN }}
+          
 
   run-unit-tests:
     needs: pick-runner