fix: use METRICS_TOKEN for cross-org repository template steps in metrics workflow

[Copilot]

PR #488 replaced the expired ORG_TOKEN with github.token, but GITHUB_TOKEN is scoped to the .github repo and cannot execute the GraphQL query organization(login: "z-shell") { repository(name: "...") } that lowlighter/metrics issues for template: repository mode — yielding "Resource not accessible by integration" on every attempt.

Changes

• metrics.yml: For the three template: repository steps (zi, wiki, f-sy-h), replace token: ${{ github.token }} with token: ${{ secrets.METRICS_TOKEN }} and add committer_token: ${{ github.token }} so GITHUB_TOKEN (with contents: write) still handles committing the SVGs to the metrics branch.

token: ${{ secrets.METRICS_TOKEN }}        # PAT — cross-org repo read
committer_token: ${{ github.token }}       # GITHUB_TOKEN — write to metrics branch

The first four steps (header, repositories, stargazers, followup) continue using github.token — their org-level queries work with GITHUB_TOKEN and are unaffected.

Required action

A METRICS_TOKEN secret must be provisioned in the metrics environment: a classic PAT with public_repo scope, or a fine-grained PAT with read access to zi, wiki, and f-sy-h.

[Copilot]

Pull request overview

This PR fixes failing lowlighter/metrics runs in .github/workflows/metrics.yml when using template: repository against other repositories in the z-shell org. It switches those template steps to use a dedicated PAT (METRICS_TOKEN) for cross-repo/org GraphQL reads while continuing to use GITHUB_TOKEN to commit generated SVGs to the metrics branch.

Changes:

• Update the three template: repository steps (zi, wiki, f-sy-h) to use token: ${{ secrets.METRICS_TOKEN }} for cross-repository API access.
• Add committer_token: ${{ github.token }} so commits still use the workflow-scoped GITHUB_TOKEN (with contents: write) to push to the metrics branch.