simplify token

.github/workflows/python-publish.yml

@@ -21,9 +21,9 @@ jobs:
     steps:
     - name: checkout
       uses: actions/checkout@v4
-      # with:
-      #   fetch-depth: 0
-        # token: ${{ secrets.BOT_SECRET }}
+      with:
+        persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal access token.
+        fetch-depth: 0 # otherwise, there would be errors pushing refs to the destination repository.
 
     - name: Install dependencies
       run: |
@@ -32,7 +32,6 @@ jobs:
 
     - name: Bump version
       run: |
-        git remote set-url origin https://odabot:${{ secrets.BOT_SECRET }}@github.com/oda-hub/oda_api.git
         git config --global user.email "[email protected]"
         git config --global user.name "ODA Release Bot"
         bump2version patch --verbose --commit --tag