In Nixvim we've been using @glepage:matrix.org's PAT for pushing lockfile update PRs, because you need to push as a "real" user to trigger CI.

This gets a bit confusing sometimes, so we'd like to push those PRs as @nix-infra-bot instead. Would it be possible to add a Personal Access Token to our repo secrets, so we can have our CI use that token instead?

It would need write access to Nixvim, and ideally the secret would be named something like INFRA_BOT_TOKEN.