[self-care:open-source-failures] Restore GitHub App token generation for AW Optimization / AI Credit Savings

`AW Optimization / AI Credit Savings` in `githubnext/gh-aw-cao` failed at least 5 times in the bounded snapshot while trying to `Generate GitHub App token`, so the workflow is blocked before it can analyze or remediate AI credit usage. This is a repeated pre-task dependency failure with clear step-level evidence.

**Action:** CAO maintainers should restore GitHub App token generation for `AW Optimization / AI Credit Savings`; accept when a fresh run completes the `Generate GitHub App token` step and reaches its main analysis work.

Agent prompt
Investigate repeated `Generate GitHub App token` failures in `githubnext/gh-aw-cao` for `AW Optimization / AI Credit Savings`. Review the workflow source, token-generation action inputs, app/installation assumptions, and any recent policy or secret changes that could break token issuance. Implement the smallest safe fix, regenerate lock files if needed, and validate with the narrowest relevant tests plus compile.

Critical findings:
- Representative run: https://github.com/githubnext/gh-aw-cao/actions/runs/34030141078
- The same step-level signature recurred in 5 enriched runs in the bounded snapshot.
- Evidence supports a token-issuance dependency failure before the workflow's main task; bounded evidence does not reveal whether the root cause is secret rotation, installation scope, or workflow input drift.

Bounded evidence

Representative runs:
- https://github.com/githubnext/gh-aw-cao/actions/runs/34030141078
- https://github.com/githubnext/gh-aw-cao/actions/runs/34030114542
- https://github.com/githubnext/gh-aw-cao/actions/runs/34030109948
- https://github.com/githubnext/gh-aw-cao/actions/runs/34030071857
- https://github.com/githubnext/gh-aw-cao/actions/runs/34027416133

Observed repeated failure step:
- `Generate GitHub App token`

Evidence window: last `168` hours; snapshot truncated to newest 100 failed runs.

### Control Plane
- Correlation ID: `34033044136-283`
- Central repository: `githubnext/gh-aw-cao`
- Control-plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/34033044136

> Generated by [SelfCare / Open Source Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/34033255907) · pi · gpt54 · 21.4 AIC · ⌖ 8.69 AIC · ⊞ 8.3K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Fself-care-open-source-failures%22&type=issues)
> - [x] expires on Sep 20, 2026, 12:35 PM UTC

Start with the workflow source and the `Generate GitHub App token` action inputs, then compare the five linked failed runs. Check the app and installation assumptions alongside recent policy or secret changes, and validate the smallest safe fix with the narrowest relevant tests and a compile. Done means a fresh run completes token generation and reaches its main analysis work.

Written by the indexing model from the issue text.