fix: broken release pipeline

.github/workflows/master-pushed.yml

@@ -9,6 +9,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          # Allow pushing to `master` branch which is protected
+          # See https://github.com/settings/tokens/1477019585
+          token: ${{ secrets.GIT_PUSH_TOKEN }}
 
       - uses: actions/setup-node@v4
         with:
@@ -20,5 +23,8 @@ jobs:
 
       - run: npx auto-npm-version
         env:
+          # Allow creating a new entry in https://github.com/taskworld/positioning-strategy/releases
           GITHUB_TOKEN: ${{ secrets.GIT_PUSH_TOKEN }}
+          # Allow publishing to https://www.npmjs.com/package/positioning-strategy
+          # See https://www.npmjs.com/settings/rebasecop/tokens
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}