Refactor winget workflow to use winget-releaser action

- Switch from manual wingetcreate to vedantmgoyal9/winget-releaser action
- Add GitHub App token generation for authentication
- Add pull_request trigger for testing
- Rename version input to release_tag with clearer description
- Add explicit read permissions for contents

Assisted-By: cagent

Author: lorenrh

.github/workflows/winget.yml

@@ -1,31 +1,29 @@
 name: winget
-
 on:
   release:
     types: [published]
   workflow_dispatch:
     inputs:
-      version:
-        description: 'Version'
+      release_tag:
+        description: 'Release tag to publish (e.g., v1.20.5)'
         required: true
-
-env:
-  WINGET_CREATE_GITHUB_TOKEN: ${{ secrets.WINGET_TOKEN }}
-
+        type: string
+permissions:
+  contents: read
 jobs:
   publish:
     runs-on: windows-latest
     steps:
-      - name: publish
-        env:
-          RELEASE: ${{ toJSON(github.event.release) }}
-          VERSION: ${{ github.event.inputs.version }}
-        run: |
-          $Version = $ENV:VERSION
-          $PackageId = "Docker.Cagent"
-          $Urls = @(
-            "https://github.com/docker/cagent/releases/download/$Version/cagent-windows-amd64.exe|amd64",
-            "https://github.com/docker/cagent/releases/download/$Version/cagent-windows-arm64.exe|arm64"
-          )
-          & curl.exe -JLO https://aka.ms/wingetcreate/latest
-          & .\wingetcreate.exe update $PackageId -s -v $Version -u $Urls
+      - name: Generate GitHub App token
+        id: app-token
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2
+        with:
+          app_id: ${{ secrets.CAGENT_REVIEWER_APP_ID }}
+          private_key: ${{ secrets.CAGENT_REVIEWER_APP_PRIVATE_KEY }}
+
+      - name: Publish to WinGet
+        uses: vedantmgoyal9/winget-releaser@19e706d4c9121098010096f9c495a70a7518b30f # v2
+        with:
+          identifier: "Docker.Cagent"
+          version: "${{ github.event.release.tag_name || inputs.release_tag }}"
+          token: ${{ steps.app-token.outputs.token }}