ci: enable PDM lockfile updates

.github/workflows/sync_python_deps.yml.disabled → .github/workflows/sync_python_deps.yml

@@ -4,28 +4,31 @@ name: Update Python dependencies with PDM
 
 on:
   schedule:
-    - cron: "0 0 * * *"
+    - cron: "0 12 * * *"
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   update-dependencies:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
       - name: Update dependencies with PDM
-        # XXX Use the upstream version when repository is not private
         uses: pdm-project/update-deps-action@main
         with:
           # The personal access token, default: ${{ github.token }}
-          token: ${{ secrets.GH_TOKEN }}
+          token: ${{ github.token }}
           # The commit message"
           commit-message: "chore(deps): Update pdm.lock"
           # The PR title
           pr-title: "chore(deps): Update Python dependencies with PDM"
           # The update strategy, can be 'reuse', 'eager' or 'all'
           update-strategy: all
           # Whether to install PDM plugins before update
-          install-plugins: "false"
+          install-plugins: "true"
           # Whether commit message contains signed-off-by
           sign-off-commit: "true"