Ensure extension repo build and release feature works when using PRs

[richard-cox]

Occurred changes and/or fixed issues

• extension repos will use the .github/workflows/build-extension-charts.yml workflow to build extension helm charts
• some will pass in create_pr which creates a PR with the changes instead of pushing directly to a branch
• the step that does this Run build script currently fails due to a missing GH_TOKEN env var - https://github.com/rancher/ui-plugin-examples/actions/runs/18319242795/job/52167913911
• Two fixes
  • set the GH_TOKEN env
  • set correct permissions in extension repo's workflow
    • exist extension repos would need to mirror https://github.com/rancher/ui-plugin-examples/pull/79/files#diff-5e554b589663fa4ea9eff7b1f73a0d20f216ddf68a8c4ef5cc507163d5728351
    • future extension repos should be covered by changes in this pr
• build confirmed with ui-plugins-examples pointing to this branch https://github.com/rancher/ui-plugin-examples/actions/runs/18593975196

Checklist

• The PR is linked to an issue and the linked issue has a Milestone, or no issue is needed
• The PR has a Milestone
• The PR template has been filled out
• The PR has been self reviewed
• The PR has a reviewer assigned
• The PR has automated tests or clear instructions for manual tests and the linked issue has appropriate QA labels, or tests are not needed
• The PR has reviewed with UX and tested in light and dark mode, or there are no UX changes
• The PR has been reviewed in terms of Accessibility
• The PR has considered, and if applicable tested with, the three Global Roles Admin, Standard User and User Base

[aalves08]

LGTM @richard-cox . One question: did anything have to change in terms of permissions on ui-plugin-examples side or the needed fix was just on dashboard's reusable workflow with pull-requests: write and env: GH_TOKEN: ${{ github.token }}.

just wanting to confirm because I am hitting a similar problem with ui-plugin-charts with creating a PR although the workflow is self-contained on the ui-plugin-charts repo rancher/ui-plugin-charts#137

PR is still not 100% correct, but the gist of it is there

[richard-cox]

@aalves08 yep! you'll need to mirror the changes in creators/extension/app/files/.github/workflows/build-extension-charts.yml to the version in ui-plugin-charts. in ui-plugin-examples that change had already been made

Edit: just pull-requests: write is needed in the calling repo. that calls out repo's .github/workflows/build-extension-charts.yml which has the gh token changes.