Use PAT for Scorecard publishing

[ryjones]

Proposed changes

Use a fine-grained token for publishing

Types of changes

• Bug fix

Please make sure to follow these points

• I have read the contributing guidelines.
• I have performed a self-review of my own code or work.
• I have commented my code, particularly in hard-to-understand areas.
• My changes generates no new warnings.
• My Pull Request title is in format < issue name > eg Added links in the documentation.
• I have added tests that prove my fix is effective or that my feature works.
• My changes have sufficient code coverage (unit, integration, e2e tests).