ci(release-please): pin reusable @1.0.0 and use secrets: inherit (#30)

github-workflows-public 1.0.0 reads the App credentials from the org-level
RELEASE_PLEASE_CLIENT_ID variable and RELEASE_PLEASE_PRIVATE_KEY secret
automatically, so callers only need `secrets: inherit`. PRs opened by the
App identity trigger downstream pull_request workflows; PRs opened by the
default GITHUB_TOKEN do not (GitHub anti-recursion), which previously left
release PRs unmergeable on repos with required checks.

Assisted-by: Claude Code

Author: kojiromike

.github/workflows/release-please.yml

@@ -10,7 +10,8 @@ permissions: {}
 
 jobs:
   release-please:
-    uses: opencoreemr/github-workflows-public/.github/workflows/release-please-reusable.yml@0.0.6
+    uses: opencoreemr/github-workflows-public/.github/workflows/release-please-reusable.yml@1.0.0
     permissions:
       contents: write
       pull-requests: write
+    secrets: inherit