ci: fix the update-models workflow

.github/workflows/update-models.yaml

@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
 
 concurrency:
   group: update-models
@@ -28,6 +28,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
+          ssh-key: ${{ secrets.RELEASE_BOT_SSH_KEY }}
           persist-credentials: true
 
       - name: Install Rust Toolchain Components
@@ -77,9 +78,6 @@ jobs:
           echo "Listed $COUNT chat models"
           test "$COUNT" -ge 40
 
-    # Pushes made with the default GITHUB_TOKEN do not trigger other workflows,
-    # so this push cannot start a workflow loop. The pull --rebase covers a human
-    # push landing mid-run; if the race is lost anyway, the next cron run retries.
       - name: Commit and push
         if: steps.diff.outputs.changed == 'true'
         run: |
@@ -87,6 +85,6 @@ jobs:
           git checkout -- .
           git config user.name 'github-actions[bot]'
           git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
-        git commit -m 'chore: refresh generated model catalog'
+          git commit -m 'chore: refresh generated model catalog [skip ci]'
           git pull --rebase origin main
           git push origin main