Attempt to fix tag-release workflow by moving conditional secrets usage into env

.github/workflows/tag-release.yaml

@@ -26,6 +26,8 @@ on:
 jobs:
   tag-release:
     runs-on: ubuntu-latest
+    env:
+      GITHUB_TAG_TOKEN: ${{ secrets.GITHUB_TAG_TOKEN }}
     steps:
       - name: Setup Env Vars
         run: |
@@ -34,9 +36,9 @@ jobs:
           echo NIGHTLY_DATE=$(date --rfc-3339=date) >> ${GITHUB_ENV}
       - name: Update Tag
         uses: actions/github-script@v7.0.1
-        if: ${{ secrets.GITHUB_NIGHTLY_TOKEN != "" }}
+        if: env.GITHUB_TAG_TOKEN
         with:
-          github-token: ${{ secrets.GITHUB_NIGHTLY_TOKEN }}
+          github-token: ${{ env.GITHUB_TAG_TOKEN }}
           script: |
             github.rest.git.createRef(
               owner: context.repo.owner,