fix(ci): create changelog PR as hoangsvit and approve with eplus-bot

[hoangsvit]

Summary

Update the release workflow to use two real GitHub accounts with separate responsibilities:

• hoangsvit creates the changelog branch and pull request.
• eplus-bot approves the pull request after CI passes through pr-auto-approve.yml.
• hoangsvit performs the squash merge after the approval is present.

Changes

• Require and validate HOANGSVIT_TOKEN as the hoangsvit account.
• Continue validating EPLUS_BOT_TOKEN as the eplus-bot account.
• Create commits and changelog PRs using HOANGSVIT_TOKEN.
• Remove approval via github-actions[bot] from the release workflow.
• Wait for CI, all checks, and an eplus-bot approval tied to the current PR head SHA.
• Merge the changelog PR using HOANGSVIT_TOKEN.

Required secret

Add repository Actions secret HOANGSVIT_TOKEN with a token owned by hoangsvit and sufficient repository contents/pull-request permissions.

[qodo-code-review]

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →

[eplus-bot]

Thank you for creating this pull request and helping make the project better.

We will review / merge it when we are online.

[deepsource-io]

DeepSource Code Review

We reviewed changes in 7f2569d...0dcac10 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Jul 15, 2026 12:32a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[eplus-bot]

Approved by @eplus-bot after all pull request checks passed.

CI run: https://github.com/ePlus-DEV/gmail-alias-toolkit/actions/runs/29379322220

[eplus-bot]

Approved by @eplus-bot after all pull request checks passed.

Approval refresh: #1
CI updated: 2026-07-15T00:33:14Z
CI attempt: #1
Approval workflow: #186.1

CI run: https://github.com/ePlus-DEV/gmail-alias-toolkit/actions/runs/29379322220

[github-actions]

Thanks for helping make Gmail Alias Toolkit better!