fix: token in autopilot

Signed-off-by: Mateusz Urbanek <[email protected]>

.github/workflows/autopilot.yaml

@@ -7,9 +7,17 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
+    if: |
+      contains(github.event.pull_request.labels.*.name, 'area/dependency') &&
+      !contains(github.event.pull_request.labels.*.name, 'do-not-merge') &&
+      github.actor == 'renovate[bot]'
     steps:
-      - if: |
-          contains(github.event.pull_request.labels.*.name, 'area/dependency') &&
-          !contains(github.event.pull_request.labels.*.name, 'do-not-merge') &&
-          github.actor == 'renovate[bot]'
-        uses: hmarr/auto-approve-action@v4
+      - uses: bitwarden/sm-action@v2
+        with:
+          access_token: ${{ secrets.BW_ACCESS_TOKEN }}
+          base_url: https://vault.bitwarden.com
+          secrets: |
+            a288b2ae-a336-4425-9b07-b1f100cd05ec > PAT
+      - uses: hmarr/auto-approve-action@v4
+        with:
+          github-token: ${{ env.PAT }}