feat: replace the workflows withe github apps

[hchenxa]

What & why

#253

Type of change

• Bug fix
• New feature
• Refactor / cleanup
• Docs
• Other:

Testing

GOCACHE=/private/tmp/san-go-build-cache go test ./...

Checklist

• Follows Conventional Commits (feat:, fix:, docs:, …)
• All commits signed off (git commit -s) — certifies the DCO
• Tests pass locally
• Docs updated (if behavior or config changed)
• Read and follow the Code of Conduct

[san-ci]

Hi @hchenxa! Based on the OWNERS file, I suggest requesting a review from @yanmxa.

[san-ci]

Hi @hchenxa! This PR needs to be rebased on the latest base branch. Please rebase your branch so it can be reviewed again. The lgtm label has been removed.

[san-ci]

[REBASE NOTIFIER] Hi @hchenxa! This PR is behind the base branch and needs to be rebased.

The lgtm label has been removed and the reviewer will need to re-review after you fix this.

Details

**What to do:** Run `git rebase main` locally, then force-push the updated branch.

After fixing:

• The need-rebase label will be automatically removed
• Request a new review from the OWNERS
• The reviewer can add lgtm once satisfied

[san-ci]

[PR TITLE LINT] PR title does not follow Conventional Commits format.

Please update your PR title to follow Conventional Commits format:

type(scope): description

Allowed types:
feat | fix | docs | style | refactor | perf | test | build | ci | chore | revert

Examples:

feat: add user login
fix(api): handle null response
docs: update readme
refactor: extract auth middleware

You can edit the title at the top of this PR.

[san-ci]

[DCO NOTIFIER] Hi @hchenxa! Some commits in this PR are missing a Signed-off-by.

What to do:

git commit --amend -s
git push --force

Or to sign off the most recent commit without changing the message:

git commit --amend --no-edit -s
git push --force

Once all commits are signed, the dco:no label will be automatically removed and replaced with dco:true.

[hchenxa]

/assign @yanmxa

[yanmxa]

/lgtm

[san-ci]

[APPROVALNOTIFIER] This PR has the lgtm label but is NOT APPROVED yet.

Please request an approving review from @yanmxa (see OWNERS).

Once approved, the Review Gate will automatically squash-merge this PR.

[yanmxa]

/approve

[san-ci]

Approved