ci: fix package lock again (#2449)

We are able to push commits over here:
https://github.com/wjones127/lancedb/blob/cb7293e07398f0acadb60445273fe22e59eff7f5/.github/workflows/make-release-commit.yml#L88-L95

So I think it's safe to assume this will work.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **Chores**
- Updated workflow configuration to improve authentication and branch
targeting for automated release processes.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

.github/workflows/npm-publish.yml

@@ -550,6 +550,9 @@ jobs:
           bash ci/update_lockfiles.sh
       - name: Push new commit
         uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.LANCEDB_RELEASE_TOKEN }}
+          branch: main
       - name: Notify Slack Action
         uses: ravsamhq/notify-slack-action@2.3.0
         if: ${{ always() }}