[BLD]: fix hotfix workflow (#3301)

## Description of changes

Uses bot token instead of provided GitHub token to create hotfix PR.

## Test plan
*How are these changes tested?*

n/a

## Documentation Changes
*Are all docstrings for user-facing APIs updated if required? Do we need
to make documentation changes in the [docs
repository](https://github.com/chroma-core/docs)?*

n/a

.github/workflows/apply-hotfix.yaml

@@ -43,13 +43,11 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - resolve-branch
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
+          token: ${{ secrets.HOSTED_CHROMA_WORKFLOW_DISPATCH_TOKEN }}
           fetch-depth: 0
 
       - name: Checkout branch
@@ -97,7 +95,7 @@ jobs:
       - name: Create Pull Request
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.HOSTED_CHROMA_WORKFLOW_DISPATCH_TOKEN }}
           script: |
             const baseBranch = "${{ needs.resolve-branch.outputs.branch_name }}"
             const headBranch = process.env.BRANCH_NAME