The demo dir workflow currently uses the mcp-bot account, create a separate one just for this with proper permissions.