chore: rename bot reference mm-token-exchange-service -> metamask-ci

Tracks the GitHub App rename (App ID 3202397) to metamask-ci. Updates
the CLA allowlist and the known-bots list used by the PR/issue
template checker.

DO NOT MERGE until the TechOps cutover renames the app - merging
early will break CLA allowlist and known-bot detection for the old
slug.

Refs INFRA-3680, INFRA-3763

Author: Qbandev

.github/scripts/check-template-and-add-labels.ts

@@ -28,7 +28,7 @@ import {
   upsertStickyComment,
 } from './shared/pr-template-comment';
 
-const knownBots = ["metamaskbot", "metamaskbotv2", "dependabot", "github-actions", "sentry-io", "devin-ai-integration", "runway-github" , "cursor", "mm-token-exchange-service"];
+const knownBots = ["metamaskbot", "metamaskbotv2", "dependabot", "github-actions", "sentry-io", "devin-ai-integration", "runway-github" , "cursor", "metamask-ci"];
 
 // GitHub App / bot logins that cannot be resolved as User in GraphQL (user(login:) returns null).
 // Issues/PRs from these actors still get full template and label checks; we only skip the org check.

.github/workflows/cla.yml

@@ -24,6 +24,6 @@ jobs:
           url-to-cladocument: 'https://metamask.io/cla.html'
           # This branch can't have protections, commits are made directly to the specified branch.
           branch: 'cla-signatures'
-          allowlist: 'dependabot[bot],metamaskbot,metamaskbotv2[bot],crowdin-bot,runway-github[bot],cursorbot,cursoragent,Copilot,cursor[bot],mm-token-exchange-service[bot]'
+          allowlist: 'dependabot[bot],metamaskbot,metamaskbotv2[bot],crowdin-bot,runway-github[bot],cursorbot,cursoragent,Copilot,cursor[bot],metamask-ci[bot]'
           allow-organization-members: true
           blockchain-storage-flag: false