test: app-push smoketest workflow (throwaway)

Author: sbryngelson

.github/workflows/app-push-smoketest.yml

@@ -0,0 +1,35 @@
+# THROWAWAY: verifies the mfc-map-bot app token can push to protected master
+# (persist-credentials:false + ruleset Integration bypass) without running the
+# full coverage SLURM job. Delete this workflow + branch after confirming.
+name: 'App Push Smoketest'
+on:
+  push:
+    branches: [app-push-smoketest]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  smoketest:
+    if: github.repository == 'MFlowCode/MFC'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: master
+          persist-credentials: false
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.MAP_BOT_APP_ID }}
+          private-key: ${{ secrets.MAP_BOT_APP_PRIVATE_KEY }}
+      - name: Push a tiny commit to master via the app token
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          git config user.name  "mfc-map-bot[bot]"
+          git config user.email "mfc-map-bot[bot]@users.noreply.github.com"
+          echo "app-push smoketest at $(date -u +%Y-%m-%dT%H:%M:%SZ)" > .github/app-push-smoketest.txt
+          git add .github/app-push-smoketest.txt
+          git commit --no-verify -m "test: app-push smoketest (delete me) [skip ci]"
+          git push "https://x-access-token:${GH_TOKEN}@github.com/MFlowCode/MFC.git" HEAD:master