Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/change-prerelease-tag.yml:
- Line 43: The workflow currently sets persist-credentials: false which prevents
the GitHub App token from being stored and makes the later git push (the step
that runs git push) fail; fix by either removing the persist-credentials: false
setting from the checkout step so the token provided by
steps.github-actions-bot-app-token.outputs.token persists for subsequent git
operations, or keep persist-credentials: false but add a git remote
reconfiguration before the push (run a command to set origin to
https://x-access-token:${{ steps.github-actions-bot-app-token.outputs.token
}}@github.com/${{ github.repository }}) so the push uses the App token; apply
the same change to the other affected workflows (prerelease.yml and
exit-prerelease.yml) as well.

In @.github/workflows/exit-prerelease.yml:
- Line 38: The workflow sets actions/checkout with persist-credentials: false
which prevents credentials from being available for the subsequent git push;
before the git push step (the push command referenced in the workflow) either
re-configure git credentials by setting the origin URL to include the token from
steps.github-actions-bot-app-token.outputs.token (using git remote set-url
origin https://x-access-token:${{
steps.github-actions-bot-app-token.outputs.token }}@github.com/${{
github.repository }}) or remove persist-credentials: false from the
actions/checkout invocation so credentials are persisted; update the workflow to
perform one of these fixes so the git push succeeds.

---

Nitpick comments:
In @.github/workflows/release.yml:
- Line 172: Update the inline version comment formatting to include a space
before the version number for consistency; change the comment on the
actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
occurrence (currently "#v3") to "# v3" and similarly change the other action
comment (the one flagged as "#v1") to "# v1" so all workflow action comments
match the existing "# vX" style used elsewhere.