Ignore scripts/, CLAUDE.md, .gitignore in auto-tag filter (#373)

* Use PAT_TOKEN for push to bypass ruleset protection

* Ignore scripts/, CLAUDE.md, .gitignore in version bump check

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ymodlin

.github/workflows/auto-tag.yml

@@ -18,6 +18,7 @@ jobs:
       with:
         ref: dev
         fetch-depth: 0
+        token: ${{ secrets.PAT_TOKEN }}
 
     - name: Branch guard
       run: |
@@ -51,7 +52,7 @@ jobs:
         fi
 
         # Filter out ignored paths
-        meaningful=$(echo "$changed" | grep -v -E '^(\.claude/|\.github/|test/|docs/)' || true)
+        meaningful=$(echo "$changed" | grep -v -E '^(\.claude/|\.github/|test/|docs/|scripts/|CLAUDE\.md$|\.gitignore$)' || true)
 
         if [ -z "$meaningful" ]; then
           echo "Only ignored-folder changes since $tag:"