ci: fix secret availability for publish workflow (#921)

Author: einarsi

.github/workflows/publish-extension.yml

@@ -1,6 +1,9 @@
 name: "🚀 Publish Extension"
 on:
   workflow_call:
+    secrets:
+      VSCE_PAT:
+        required: true
 permissions:
   contents: read
 jobs:

.github/workflows/release-please.yml

@@ -31,6 +31,8 @@ jobs:
     if: ${{ needs.release_please.outputs.extension_release_created }}
     needs: [release_please]
     uses: ./.github/workflows/publish-extension.yml
+    secrets:
+      VSCE_PAT: ${{ secrets.VSCE_PAT }}
   publish_lib:
     name: "Publish Lib"
     if: ${{ needs.release_please.outputs.lib_release_created }}