Auto-approve dependabot PRs

- approved by bot user
- also trigger IT workflows by bot user so that follow-up workflows get triggered (status reporting)

Author: stephanme

.github/workflows/dependabot-auto-merge.yml

@@ -18,3 +18,7 @@ jobs:
     steps:
       - name: Enable auto-merge
         run: gh pr merge --auto --rebase --repo "${{ github.repository }}" "${{ github.event.pull_request.number }}"
+      - name: Approve dependabot PR
+        env:
+          GH_TOKEN: ${{ secrets.BOT_GH_TOKEN }}
+        run: gh pr review --approve --repo "${{ github.repository }}" "${{ github.event.pull_request.number }}"

.github/workflows/fork-integration-trigger.yml

@@ -45,6 +45,9 @@ jobs:
             -f content=rocket
 
       - name: Trigger integration tests
+        env:
+          # need bot token, otherwise the IT workflows won't trigger fork-integration-status-reporter.yml
+          GH_TOKEN: ${{ secrets.BOT_GH_TOKEN }}
         run: |
           # run all integration test workflows in context of main branch, passing the PR head SHA as an input
           for workflow in s3-integration.yml gcs-integration.yml alioss-integration.yml azurebs-integration.yml dav-integration.yml; do