fix(ci): replace second create-pull-request with git push to preserve version bump (#75938)

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

Author: aaronsteers

.github/workflows/finalize_rollout.yml

@@ -181,6 +181,12 @@ jobs:
             auto-merge/bypass-ci-checks
           draft: true
 
+      # Switch to the PR branch so changelog add reads the bumped
+      # GA version from metadata.yaml (not the RC version on master).
+      - name: "Checkout PR branch"
+        if: steps.create-pr.outputs.pull-request-number
+        run: git fetch origin "finalize-rollout/promote/${CONNECTOR_NAME}" && git checkout "finalize-rollout/promote/${CONNECTOR_NAME}"
+
       # changelog add reads the current version from metadata.yaml
       # (already bumped to GA by the promote step above) and writes
       # a changelog entry — no version files are modified.
@@ -194,21 +200,13 @@ jobs:
           --message "Promoted release candidate to GA"
           --pr-number "${{ steps.create-pr.outputs.pull-request-number }}"
 
-      # Second create-pull-request call pushes the changelog commit
-      # to the existing PR branch.
+      # Commit and push the changelog entry to the existing PR branch.
       - name: "Push changelog to PR"
         if: steps.create-pr.outputs.pull-request-number
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
-        with:
-          token: ${{ steps.get-app-token.outputs.token }}
-          commit-message: "chore: add changelog for ${{ env.CONNECTOR_NAME }}"
-          branch: "finalize-rollout/promote/${{ env.CONNECTOR_NAME }}"
-          base: ${{ github.event.repository.default_branch }}
-          title: "chore: finalize promote for ${{ env.CONNECTOR_NAME }}"
-          body: |
-            Automated cleanup after connector rollout **promote** for `${{ env.CONNECTOR_NAME }}`.
-
-            Generated by [`finalize_rollout` workflow](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}).
+        run: |
+          git add docs/
+          git commit -m "chore: add changelog for ${CONNECTOR_NAME}"
+          git push origin "finalize-rollout/promote/${CONNECTOR_NAME}"
 
       # The merge triggers the publish pipeline that
       # verifyDefaultVersionActivity is waiting for.