Switch to app token for update dependencies

.github/dependabot.yaml

@@ -1,9 +1,5 @@
 version: 2
 updates:
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "weekly"
   - package-ecosystem: "docker"
     directory: "/"
     schedule:

.github/workflows/update-dependencies.yaml

@@ -3,11 +3,10 @@ name: Update dependencies
 on:
   workflow_dispatch:
   schedule:
-    - cron: '0 18 * * TUE'
+    - cron: '0 18 * * MON'
 
 permissions:
-  pull-requests: write
+  contents: read
-  contents: write
 
 jobs:
   update:
@@ -27,11 +26,17 @@ jobs:
         run: |
           pip install pip-tools invoke
           invoke update-dependencies --no-sync
+      - name: Generate token
+        uses: tibdex/github-app-token@v1
+        id: generate-token
+        with:
+          app_id: ${{ secrets.PR_APP_ID }}
+          private_key: ${{ secrets.PR_APP_PRIVATE_KEY }}
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@v4
         id: create-pull-request
         with:
-          token: ${{ secrets.PERSONAL_TOKEN_PR }}
+          token: ${{ steps.generate-token.outputs.token }}
           commit-message: Update dependencies
           base: master
           branch: update-dependencies