Fix release provenance authentication

Author: chen21019

.github/workflows/publish-port-preflight-runtime-patch.yml

@@ -110,6 +110,8 @@ jobs:
 
       - name: Verify scanner and enforce image security gates
         shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
           set -Eeuo pipefail
           trivy_version=0.73.0

scripts/check-server-port-preflight-runtime-patch.sh

@@ -94,6 +94,7 @@ for marker in \
     'id-token: write' \
     'attestations: write' \
     'artifact-metadata: write' \
+    'GH_TOKEN: ${{ github.token }}' \
     'trivy_version=0.73.0' \
     'trivy_sha256=2edd39da482bb4e9831962487b68f68e3928ec3137794757f54d00383d79547b' \
     '--scanners vuln,secret' \