diff --git a/.github/workflows/_publish-wheel.yml b/.github/workflows/_publish-wheel.yml
index 4c00e2c584..823486321c 100644
--- a/.github/workflows/_publish-wheel.yml
+++ b/.github/workflows/_publish-wheel.yml
@@ -25,6 +25,12 @@ on:
         required: false
         default: ''
         type: string
+    secrets:
+      app-private-key:
+        description: >-
+          Private key of the riseproject-dev GitHub App. Without it the
+          documentation PR is opened with GITHUB_TOKEN and gets no checks.
+        required: false
 
 concurrency:
   group: publish-wheel
@@ -35,10 +41,22 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
+      # A branch pushed or a PR opened with GITHUB_TOKEN raises no events, so
+      # the documentation PR would sit there with no checks. Push and open it
+      # as the App instead; without its credentials, or on a pull request
+      # (where nothing is published anyway), this falls back to GITHUB_TOKEN.
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        id: app-token
+        if: ${{ vars.RISEPROJECT_APP_CLIENT_ID != '' && github.ref == 'refs/heads/main' }}
+        with:
+          client-id: ${{ vars.RISEPROJECT_APP_CLIENT_ID }}
+          private-key: ${{ secrets.app-private-key }}
+
       - name: Checkout python-wheels
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
 
       - name: Download wheels
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
@@ -136,7 +154,7 @@ jobs:
       - name: Create draft release and upload assets
         if: github.ref == 'refs/heads/main'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
           RELEASE_TAG: ${{ steps.release.outputs.tag }}
           RELEASE_TITLE: ${{ steps.release.outputs.title }}
         run: |
@@ -166,7 +184,7 @@ jobs:
       - name: Verify release is immutable
         if: github.ref == 'refs/heads/main'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
         run: |
           immutable=$(gh api \
             "repos/${{ github.repository }}/releases/tags/${{ steps.release.outputs.tag }}" \
@@ -178,7 +196,8 @@ jobs:
 
       - name: Update package documentation
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
           ARTIFACTS_PATH: ${{ inputs.artifact-path }}
           RELEASE_TAG: ${{ steps.release.outputs.tag }}
           GPL_SOURCES_DESCRIPTION: ${{ inputs.gpl-sources-description }}
diff --git a/.github/workflows/build-ada-url.yml b/.github/workflows/build-ada-url.yml
index 6e215d4d0e..0837a344d7 100644
--- a/.github/workflows/build-ada-url.yml
+++ b/.github/workflows/build-ada-url.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ada-url-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-adbc-driver-manager.yml b/.github/workflows/build-adbc-driver-manager.yml
index a0c3ea318b..ff815f45e2 100644
--- a/.github/workflows/build-adbc-driver-manager.yml
+++ b/.github/workflows/build-adbc-driver-manager.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: adbc-driver-manager-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-adbc-driver-postgresql.yml b/.github/workflows/build-adbc-driver-postgresql.yml
index cb94e06acd..9e87762403 100644
--- a/.github/workflows/build-adbc-driver-postgresql.yml
+++ b/.github/workflows/build-adbc-driver-postgresql.yml
@@ -174,5 +174,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: adbc-driver-postgresql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-adbc-driver-sqlite.yml b/.github/workflows/build-adbc-driver-sqlite.yml
index fda706df7d..c6e24e3916 100644
--- a/.github/workflows/build-adbc-driver-sqlite.yml
+++ b/.github/workflows/build-adbc-driver-sqlite.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: adbc-driver-sqlite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-aggdraw.yml b/.github/workflows/build-aggdraw.yml
index 54ced1a7e8..264dffde39 100644
--- a/.github/workflows/build-aggdraw.yml
+++ b/.github/workflows/build-aggdraw.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aggdraw-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ahocorasick-rs.yml b/.github/workflows/build-ahocorasick-rs.yml
index 72808b48a1..44cc41f1ee 100644
--- a/.github/workflows/build-ahocorasick-rs.yml
+++ b/.github/workflows/build-ahocorasick-rs.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ahocorasick-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-aiocsv.yml b/.github/workflows/build-aiocsv.yml
index f389120236..5c8fc05415 100644
--- a/.github/workflows/build-aiocsv.yml
+++ b/.github/workflows/build-aiocsv.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aiocsv-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-aiokafka.yml b/.github/workflows/build-aiokafka.yml
index ed5eaf20b7..ef76c63466 100644
--- a/.github/workflows/build-aiokafka.yml
+++ b/.github/workflows/build-aiokafka.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aiokafka-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-aioquic.yml b/.github/workflows/build-aioquic.yml
index 3805af68c8..f70facc8b9 100644
--- a/.github/workflows/build-aioquic.yml
+++ b/.github/workflows/build-aioquic.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aioquic-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-amazon-ion.yml b/.github/workflows/build-amazon-ion.yml
index 920656e92e..e63805ae9a 100644
--- a/.github/workflows/build-amazon-ion.yml
+++ b/.github/workflows/build-amazon-ion.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: amazon-ion-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ansible-pylibssh.yml b/.github/workflows/build-ansible-pylibssh.yml
index ea1732fc00..5e57d7e88f 100644
--- a/.github/workflows/build-ansible-pylibssh.yml
+++ b/.github/workflows/build-ansible-pylibssh.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ansible-pylibssh-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-anycrc.yml b/.github/workflows/build-anycrc.yml
index 85c64efd82..f6ab965c1a 100644
--- a/.github/workflows/build-anycrc.yml
+++ b/.github/workflows/build-anycrc.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: anycrc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apache-beam.yml b/.github/workflows/build-apache-beam.yml
index 589434c993..79a7183315 100644
--- a/.github/workflows/build-apache-beam.yml
+++ b/.github/workflows/build-apache-beam.yml
@@ -164,5 +164,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apache-beam-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apache-sedona.yml b/.github/workflows/build-apache-sedona.yml
index e98a1d09b8..8e77d89870 100644
--- a/.github/workflows/build-apache-sedona.yml
+++ b/.github/workflows/build-apache-sedona.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apache-sedona-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apache-tvm-ffi.yml b/.github/workflows/build-apache-tvm-ffi.yml
index 4d92ea7385..96de0e0df5 100644
--- a/.github/workflows/build-apache-tvm-ffi.yml
+++ b/.github/workflows/build-apache-tvm-ffi.yml
@@ -216,5 +216,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apache-tvm-ffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apsw.yml b/.github/workflows/build-apsw.yml
index 7dbe8dd8ba..82513598b9 100644
--- a/.github/workflows/build-apsw.yml
+++ b/.github/workflows/build-apsw.yml
@@ -90,5 +90,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apsw-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arc4.yml b/.github/workflows/build-arc4.yml
index 797207e7bc..8afd66554c 100644
--- a/.github/workflows/build-arc4.yml
+++ b/.github/workflows/build-arc4.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arc4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arch.yml b/.github/workflows/build-arch.yml
index 60dde636ac..976e5a79aa 100644
--- a/.github/workflows/build-arch.yml
+++ b/.github/workflows/build-arch.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-array-record.yml b/.github/workflows/build-array-record.yml
index 9123db0b10..3f8b690d9f 100644
--- a/.github/workflows/build-array-record.yml
+++ b/.github/workflows/build-array-record.yml
@@ -344,5 +344,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: array-record-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arraykit.yml b/.github/workflows/build-arraykit.yml
index 7269d9428f..a3765bd5e1 100644
--- a/.github/workflows/build-arraykit.yml
+++ b/.github/workflows/build-arraykit.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arraykit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arro3-core.yml b/.github/workflows/build-arro3-core.yml
index 894e5177d0..a6a317c30f 100644
--- a/.github/workflows/build-arro3-core.yml
+++ b/.github/workflows/build-arro3-core.yml
@@ -326,5 +326,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arro3-core-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asammdf.yml b/.github/workflows/build-asammdf.yml
index 8c81487224..c8b6ec6eac 100644
--- a/.github/workflows/build-asammdf.yml
+++ b/.github/workflows/build-asammdf.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asammdf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ast-grep-cli.yml b/.github/workflows/build-ast-grep-cli.yml
index e3bab49690..3f9c6ee4e1 100644
--- a/.github/workflows/build-ast-grep-cli.yml
+++ b/.github/workflows/build-ast-grep-cli.yml
@@ -154,5 +154,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ast-grep-cli-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-ast-grep-py.yml b/.github/workflows/build-ast-grep-py.yml
index 914da9bcc2..047736f3e0 100644
--- a/.github/workflows/build-ast-grep-py.yml
+++ b/.github/workflows/build-ast-grep-py.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ast-grep-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-astc-encoder-py.yml b/.github/workflows/build-astc-encoder-py.yml
index 55b545d1ef..9206f0f9fd 100644
--- a/.github/workflows/build-astc-encoder-py.yml
+++ b/.github/workflows/build-astc-encoder-py.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: astc-encoder-py-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-astropy-healpix.yml b/.github/workflows/build-astropy-healpix.yml
index 06138a29a5..39f6a49a6a 100644
--- a/.github/workflows/build-astropy-healpix.yml
+++ b/.github/workflows/build-astropy-healpix.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: astropy-healpix-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-astropy.yml b/.github/workflows/build-astropy.yml
index b4a9661a9b..686558546a 100644
--- a/.github/workflows/build-astropy.yml
+++ b/.github/workflows/build-astropy.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: astropy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asv.yml b/.github/workflows/build-asv.yml
index 0b4b25c7c2..09c8e96eb3 100644
--- a/.github/workflows/build-asv.yml
+++ b/.github/workflows/build-asv.yml
@@ -186,5 +186,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asv-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asynch.yml b/.github/workflows/build-asynch.yml
index 49d76564a6..f98bbf0002 100644
--- a/.github/workflows/build-asynch.yml
+++ b/.github/workflows/build-asynch.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asynch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asyncmy.yml b/.github/workflows/build-asyncmy.yml
index 116ae68c22..cf12d7d12a 100644
--- a/.github/workflows/build-asyncmy.yml
+++ b/.github/workflows/build-asyncmy.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asyncmy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asyncpg.yml b/.github/workflows/build-asyncpg.yml
index 9484dfbf99..37f87f3791 100644
--- a/.github/workflows/build-asyncpg.yml
+++ b/.github/workflows/build-asyncpg.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asyncpg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-atomic-dict.yml b/.github/workflows/build-atomic-dict.yml
index 7aeeb42447..77c73c0a0b 100644
--- a/.github/workflows/build-atomic-dict.yml
+++ b/.github/workflows/build-atomic-dict.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: atomic-dict-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-autobahn.yml b/.github/workflows/build-autobahn.yml
index 18f06d2f80..7c2bfe10e3 100644
--- a/.github/workflows/build-autobahn.yml
+++ b/.github/workflows/build-autobahn.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: autobahn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-awkward-cpp.yml b/.github/workflows/build-awkward-cpp.yml
index 4026d283e0..283e79efae 100644
--- a/.github/workflows/build-awkward-cpp.yml
+++ b/.github/workflows/build-awkward-cpp.yml
@@ -159,5 +159,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: awkward-cpp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-awscrt.yml b/.github/workflows/build-awscrt.yml
index 4f53f93278..4172629795 100644
--- a/.github/workflows/build-awscrt.yml
+++ b/.github/workflows/build-awscrt.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: awscrt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-awslambdaric.yml b/.github/workflows/build-awslambdaric.yml
index 99561f59f6..2ae1e35f7b 100644
--- a/.github/workflows/build-awslambdaric.yml
+++ b/.github/workflows/build-awslambdaric.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: awslambdaric-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-backports-datetime-fromisoformat.yml b/.github/workflows/build-backports-datetime-fromisoformat.yml
index 1f9a75d571..fa8b55afa2 100644
--- a/.github/workflows/build-backports-datetime-fromisoformat.yml
+++ b/.github/workflows/build-backports-datetime-fromisoformat.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: backports-datetime-fromisoformat-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-base2048.yml b/.github/workflows/build-base2048.yml
index d47713e2e4..374f81f060 100644
--- a/.github/workflows/build-base2048.yml
+++ b/.github/workflows/build-base2048.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: base2048-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-based58.yml b/.github/workflows/build-based58.yml
index 27e7415324..30b29c4d10 100644
--- a/.github/workflows/build-based58.yml
+++ b/.github/workflows/build-based58.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: based58-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bcrypt.yml b/.github/workflows/build-bcrypt.yml
index 136e02a2ae..6f33b4986f 100644
--- a/.github/workflows/build-bcrypt.yml
+++ b/.github/workflows/build-bcrypt.yml
@@ -196,5 +196,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bcrypt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biom-format.yml b/.github/workflows/build-biom-format.yml
index bd3af8944a..3b2a71a4b7 100644
--- a/.github/workflows/build-biom-format.yml
+++ b/.github/workflows/build-biom-format.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biom-format-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biopython.yml b/.github/workflows/build-biopython.yml
index 64db7524d3..3e0d8c0b69 100644
--- a/.github/workflows/build-biopython.yml
+++ b/.github/workflows/build-biopython.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biopython-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biotite.yml b/.github/workflows/build-biotite.yml
index a1d5de5c0c..ae000a25de 100644
--- a/.github/workflows/build-biotite.yml
+++ b/.github/workflows/build-biotite.yml
@@ -190,5 +190,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biotite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biotraj.yml b/.github/workflows/build-biotraj.yml
index 9eba7352ff..be61f59b46 100644
--- a/.github/workflows/build-biotraj.yml
+++ b/.github/workflows/build-biotraj.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biotraj-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bitarray-hardbyte.yml b/.github/workflows/build-bitarray-hardbyte.yml
index 0db30338af..152a237511 100644
--- a/.github/workflows/build-bitarray-hardbyte.yml
+++ b/.github/workflows/build-bitarray-hardbyte.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bitarray-hardbyte-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bitarray.yml b/.github/workflows/build-bitarray.yml
index c0ecf04ba3..e9d29cc27e 100644
--- a/.github/workflows/build-bitarray.yml
+++ b/.github/workflows/build-bitarray.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bitarray-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bitstruct.yml b/.github/workflows/build-bitstruct.yml
index c0630a0713..9c99534bf4 100644
--- a/.github/workflows/build-bitstruct.yml
+++ b/.github/workflows/build-bitstruct.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bitstruct-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-black.yml b/.github/workflows/build-black.yml
index 2497158707..aeda92479b 100644
--- a/.github/workflows/build-black.yml
+++ b/.github/workflows/build-black.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: black-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blis.yml b/.github/workflows/build-blis.yml
index 2758415c3a..60829561e4 100644
--- a/.github/workflows/build-blis.yml
+++ b/.github/workflows/build-blis.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blosc.yml b/.github/workflows/build-blosc.yml
index 3cc2bee74e..f82f85ee6f 100644
--- a/.github/workflows/build-blosc.yml
+++ b/.github/workflows/build-blosc.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blosc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blosc2.yml b/.github/workflows/build-blosc2.yml
index 6741765b0b..7eeddbc606 100644
--- a/.github/workflows/build-blosc2.yml
+++ b/.github/workflows/build-blosc2.yml
@@ -137,5 +137,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blosc2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bluetooth-data-tools.yml b/.github/workflows/build-bluetooth-data-tools.yml
index 18cdb8970d..40ae9c882f 100644
--- a/.github/workflows/build-bluetooth-data-tools.yml
+++ b/.github/workflows/build-bluetooth-data-tools.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bluetooth-data-tools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blurhash-python.yml b/.github/workflows/build-blurhash-python.yml
index a928c32d8c..6fa7307e2c 100644
--- a/.github/workflows/build-blurhash-python.yml
+++ b/.github/workflows/build-blurhash-python.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blurhash-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-boost-histogram.yml b/.github/workflows/build-boost-histogram.yml
index 6decd90c4f..aa0f756c2d 100644
--- a/.github/workflows/build-boost-histogram.yml
+++ b/.github/workflows/build-boost-histogram.yml
@@ -170,5 +170,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: boost-histogram-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bottleneck.yml b/.github/workflows/build-bottleneck.yml
index d45d9d959a..6f2c25ab93 100644
--- a/.github/workflows/build-bottleneck.yml
+++ b/.github/workflows/build-bottleneck.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bottleneck-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-brotli.yml b/.github/workflows/build-brotli.yml
index 13d9613902..587b5fc4cd 100644
--- a/.github/workflows/build-brotli.yml
+++ b/.github/workflows/build-brotli.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: brotli-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-brotlicffi.yml b/.github/workflows/build-brotlicffi.yml
index cdacb2df26..ad0d7ce994 100644
--- a/.github/workflows/build-brotlicffi.yml
+++ b/.github/workflows/build-brotlicffi.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: brotlicffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bsdiff4.yml b/.github/workflows/build-bsdiff4.yml
index 936c823886..79a897789a 100644
--- a/.github/workflows/build-bsdiff4.yml
+++ b/.github/workflows/build-bsdiff4.yml
@@ -90,5 +90,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bsdiff4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-btrees.yml b/.github/workflows/build-btrees.yml
index 800a4fb4a1..6a693877a8 100644
--- a/.github/workflows/build-btrees.yml
+++ b/.github/workflows/build-btrees.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: btrees-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-burner-redis.yml b/.github/workflows/build-burner-redis.yml
index c066abd01f..9432c1b07a 100644
--- a/.github/workflows/build-burner-redis.yml
+++ b/.github/workflows/build-burner-redis.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: burner-redis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bx-python.yml b/.github/workflows/build-bx-python.yml
index 2d25c5b895..73527bb3d1 100644
--- a/.github/workflows/build-bx-python.yml
+++ b/.github/workflows/build-bx-python.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bx-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-c2pa-python.yml b/.github/workflows/build-c2pa-python.yml
index dd9be22a76..4761a57a69 100644
--- a/.github/workflows/build-c2pa-python.yml
+++ b/.github/workflows/build-c2pa-python.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: c2pa-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cachebox.yml b/.github/workflows/build-cachebox.yml
index 855d4c7df5..98bb72bb65 100644
--- a/.github/workflows/build-cachebox.yml
+++ b/.github/workflows/build-cachebox.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cachebox-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-caio.yml b/.github/workflows/build-caio.yml
index 0d664317ab..2fd5868b0f 100644
--- a/.github/workflows/build-caio.yml
+++ b/.github/workflows/build-caio.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: caio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-capstone.yml b/.github/workflows/build-capstone.yml
index e6be4c262e..f8f2568ee8 100644
--- a/.github/workflows/build-capstone.yml
+++ b/.github/workflows/build-capstone.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: capstone-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-cartopy.yml b/.github/workflows/build-cartopy.yml
index 1d8d445cd1..d3af6e1796 100644
--- a/.github/workflows/build-cartopy.yml
+++ b/.github/workflows/build-cartopy.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cartopy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-casadi.yml b/.github/workflows/build-casadi.yml
index b31973f02d..9b7f6d88d0 100644
--- a/.github/workflows/build-casadi.yml
+++ b/.github/workflows/build-casadi.yml
@@ -200,5 +200,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: casadi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cbor2.yml b/.github/workflows/build-cbor2.yml
index 0f5923bf3f..e31e8c38e9 100644
--- a/.github/workflows/build-cbor2.yml
+++ b/.github/workflows/build-cbor2.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cbor2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cchardet.yml b/.github/workflows/build-cchardet.yml
index d8c5903ba8..5a0be5c31b 100644
--- a/.github/workflows/build-cchardet.yml
+++ b/.github/workflows/build-cchardet.yml
@@ -229,5 +229,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cchardet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cffi.yml b/.github/workflows/build-cffi.yml
index 4debfb58d3..4ad62c79f7 100644
--- a/.github/workflows/build-cffi.yml
+++ b/.github/workflows/build-cffi.yml
@@ -160,5 +160,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cftime.yml b/.github/workflows/build-cftime.yml
index ddbfeddf65..ce10ea6b68 100644
--- a/.github/workflows/build-cftime.yml
+++ b/.github/workflows/build-cftime.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cftime-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-chiabip158.yml b/.github/workflows/build-chiabip158.yml
index 2cefd1bf6f..1601658663 100644
--- a/.github/workflows/build-chiabip158.yml
+++ b/.github/workflows/build-chiabip158.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chiabip158-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-chompjs.yml b/.github/workflows/build-chompjs.yml
index 303f3112af..13bba61e62 100644
--- a/.github/workflows/build-chompjs.yml
+++ b/.github/workflows/build-chompjs.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chompjs-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-chroma-hnswlib.yml b/.github/workflows/build-chroma-hnswlib.yml
index 501da11b7a..7f240147c8 100644
--- a/.github/workflows/build-chroma-hnswlib.yml
+++ b/.github/workflows/build-chroma-hnswlib.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chroma-hnswlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-chromadb.yml b/.github/workflows/build-chromadb.yml
index fb0e1f8360..ed7be288cf 100644
--- a/.github/workflows/build-chromadb.yml
+++ b/.github/workflows/build-chromadb.yml
@@ -182,5 +182,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chromadb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ciso8601.yml b/.github/workflows/build-ciso8601.yml
index f668231fbe..6ff82dba9b 100644
--- a/.github/workflows/build-ciso8601.yml
+++ b/.github/workflows/build-ciso8601.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ciso8601-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-citiespy.yml b/.github/workflows/build-citiespy.yml
index 000cffd744..d431e43c45 100644
--- a/.github/workflows/build-citiespy.yml
+++ b/.github/workflows/build-citiespy.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: citiespy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cityhash.yml b/.github/workflows/build-cityhash.yml
index 2cf66240b6..a88ed5030a 100644
--- a/.github/workflows/build-cityhash.yml
+++ b/.github/workflows/build-cityhash.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cityhash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ckzg.yml b/.github/workflows/build-ckzg.yml
index e26eb37a16..7b14901833 100644
--- a/.github/workflows/build-ckzg.yml
+++ b/.github/workflows/build-ckzg.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ckzg-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-clang-format.yml b/.github/workflows/build-clang-format.yml
index 2fa396c87c..f6847dd50c 100644
--- a/.github/workflows/build-clang-format.yml
+++ b/.github/workflows/build-clang-format.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clang-format-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clarabel.yml b/.github/workflows/build-clarabel.yml
index 67a01eec45..0c5d849682 100644
--- a/.github/workflows/build-clarabel.yml
+++ b/.github/workflows/build-clarabel.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clarabel-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clevercsv.yml b/.github/workflows/build-clevercsv.yml
index 12cce3958c..738c28e1a9 100644
--- a/.github/workflows/build-clevercsv.yml
+++ b/.github/workflows/build-clevercsv.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clevercsv-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clickhouse-cityhash.yml b/.github/workflows/build-clickhouse-cityhash.yml
index 1af01009ea..1fb3f123e1 100644
--- a/.github/workflows/build-clickhouse-cityhash.yml
+++ b/.github/workflows/build-clickhouse-cityhash.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clickhouse-cityhash-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-clickhouse-connect.yml b/.github/workflows/build-clickhouse-connect.yml
index 2a0e762225..f250f84e1b 100644
--- a/.github/workflows/build-clickhouse-connect.yml
+++ b/.github/workflows/build-clickhouse-connect.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clickhouse-connect-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clickhouse-driver.yml b/.github/workflows/build-clickhouse-driver.yml
index 3b53bdfba2..eab2d4b372 100644
--- a/.github/workflows/build-clickhouse-driver.yml
+++ b/.github/workflows/build-clickhouse-driver.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clickhouse-driver-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cmarkgfm.yml b/.github/workflows/build-cmarkgfm.yml
index 91b952d224..abdf968f51 100644
--- a/.github/workflows/build-cmarkgfm.yml
+++ b/.github/workflows/build-cmarkgfm.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cmarkgfm-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-cmeel-boost.yml b/.github/workflows/build-cmeel-boost.yml
index 512008248a..982e90aa85 100644
--- a/.github/workflows/build-cmeel-boost.yml
+++ b/.github/workflows/build-cmeel-boost.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cmeel-boost-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-coacd.yml b/.github/workflows/build-coacd.yml
index 7838f22c0f..22fde6ddb1 100644
--- a/.github/workflows/build-coacd.yml
+++ b/.github/workflows/build-coacd.yml
@@ -175,6 +175,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coacd-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: coacd-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-coincurve.yml b/.github/workflows/build-coincurve.yml
index 06deac9deb..217cbb5152 100644
--- a/.github/workflows/build-coincurve.yml
+++ b/.github/workflows/build-coincurve.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coincurve-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-complexipy.yml b/.github/workflows/build-complexipy.yml
index b529305d0a..65286b1e41 100644
--- a/.github/workflows/build-complexipy.yml
+++ b/.github/workflows/build-complexipy.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: complexipy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-comrak.yml b/.github/workflows/build-comrak.yml
index a1b4c479c3..62636ae8a8 100644
--- a/.github/workflows/build-comrak.yml
+++ b/.github/workflows/build-comrak.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: comrak-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-confluent-kafka.yml b/.github/workflows/build-confluent-kafka.yml
index 8b80dbcbe8..c1e2108ad9 100644
--- a/.github/workflows/build-confluent-kafka.yml
+++ b/.github/workflows/build-confluent-kafka.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: confluent-kafka-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-connected-components-3d.yml b/.github/workflows/build-connected-components-3d.yml
index b5712abcad..2dc719dc9e 100644
--- a/.github/workflows/build-connected-components-3d.yml
+++ b/.github/workflows/build-connected-components-3d.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: connected-components-3d-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-connectorx.yml b/.github/workflows/build-connectorx.yml
index 4cba423936..84c4ff30cf 100644
--- a/.github/workflows/build-connectorx.yml
+++ b/.github/workflows/build-connectorx.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: connectorx-${{ matrix.version }}-*-riscv64
diff --git a/.github/workflows/build-convertbng.yml b/.github/workflows/build-convertbng.yml
index 2e5f7afbef..5341a767f5 100644
--- a/.github/workflows/build-convertbng.yml
+++ b/.github/workflows/build-convertbng.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: convertbng-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-coolprop.yml b/.github/workflows/build-coolprop.yml
index 599f61b7a5..1bceed1792 100644
--- a/.github/workflows/build-coolprop.yml
+++ b/.github/workflows/build-coolprop.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coolprop-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-coreforecast.yml b/.github/workflows/build-coreforecast.yml
index 1f4613c284..818a742f4f 100644
--- a/.github/workflows/build-coreforecast.yml
+++ b/.github/workflows/build-coreforecast.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coreforecast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-correctionlib.yml b/.github/workflows/build-correctionlib.yml
index cad1588a91..70490d84ef 100644
--- a/.github/workflows/build-correctionlib.yml
+++ b/.github/workflows/build-correctionlib.yml
@@ -188,5 +188,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: correctionlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cramjam.yml b/.github/workflows/build-cramjam.yml
index 5a3c98aead..464e495d3c 100644
--- a/.github/workflows/build-cramjam.yml
+++ b/.github/workflows/build-cramjam.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cramjam-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-crc32c.yml b/.github/workflows/build-crc32c.yml
index 4d1d40d580..756553db81 100644
--- a/.github/workflows/build-crc32c.yml
+++ b/.github/workflows/build-crc32c.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: crc32c-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-crcmod-plus.yml b/.github/workflows/build-crcmod-plus.yml
index 2968e718e1..f2c5aea69b 100644
--- a/.github/workflows/build-crcmod-plus.yml
+++ b/.github/workflows/build-crcmod-plus.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: crcmod-plus-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-crick.yml b/.github/workflows/build-crick.yml
index c33e07a1fa..f0c4316a52 100644
--- a/.github/workflows/build-crick.yml
+++ b/.github/workflows/build-crick.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: crick-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cronexpr.yml b/.github/workflows/build-cronexpr.yml
index 9c1ad438ec..814d055e41 100644
--- a/.github/workflows/build-cronexpr.yml
+++ b/.github/workflows/build-cronexpr.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cronexpr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cryptg.yml b/.github/workflows/build-cryptg.yml
index 810b2a932a..274b1b3ac7 100644
--- a/.github/workflows/build-cryptg.yml
+++ b/.github/workflows/build-cryptg.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cryptg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cryptography.yml b/.github/workflows/build-cryptography.yml
index 7ba3f0b4a8..2c485b2b7a 100644
--- a/.github/workflows/build-cryptography.yml
+++ b/.github/workflows/build-cryptography.yml
@@ -277,5 +277,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cryptography-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-css-inline.yml b/.github/workflows/build-css-inline.yml
index 80cec2f084..61e75faa79 100644
--- a/.github/workflows/build-css-inline.yml
+++ b/.github/workflows/build-css-inline.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: css-inline-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ct3.yml b/.github/workflows/build-ct3.yml
index 682fbafdf0..f47e0f1c8d 100644
--- a/.github/workflows/build-ct3.yml
+++ b/.github/workflows/build-ct3.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ct3-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ctranslate2.yml b/.github/workflows/build-ctranslate2.yml
index d2e8f4372c..2eba608b2b 100644
--- a/.github/workflows/build-ctranslate2.yml
+++ b/.github/workflows/build-ctranslate2.yml
@@ -211,6 +211,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ctranslate2-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: ctranslate2-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-curated-tokenizers.yml b/.github/workflows/build-curated-tokenizers.yml
index ea1dbdba1d..f7a7f9ecc3 100644
--- a/.github/workflows/build-curated-tokenizers.yml
+++ b/.github/workflows/build-curated-tokenizers.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: curated-tokenizers-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cwcwidth.yml b/.github/workflows/build-cwcwidth.yml
index 1d3b380a97..760a411fad 100644
--- a/.github/workflows/build-cwcwidth.yml
+++ b/.github/workflows/build-cwcwidth.yml
@@ -142,5 +142,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cwcwidth-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cydifflib.yml b/.github/workflows/build-cydifflib.yml
index 12385694a4..7474ddada0 100644
--- a/.github/workflows/build-cydifflib.yml
+++ b/.github/workflows/build-cydifflib.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cydifflib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cyksuid.yml b/.github/workflows/build-cyksuid.yml
index 0104c97365..6076b2acab 100644
--- a/.github/workflows/build-cyksuid.yml
+++ b/.github/workflows/build-cyksuid.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cyksuid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cymem.yml b/.github/workflows/build-cymem.yml
index b786306a51..7b799dee72 100644
--- a/.github/workflows/build-cymem.yml
+++ b/.github/workflows/build-cymem.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cymem-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cysignals.yml b/.github/workflows/build-cysignals.yml
index 59a956c8fe..2ff7a5ab47 100644
--- a/.github/workflows/build-cysignals.yml
+++ b/.github/workflows/build-cysignals.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cysignals-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-cysystemd.yml b/.github/workflows/build-cysystemd.yml
index 18f4af5fd7..af8a6c4cd9 100644
--- a/.github/workflows/build-cysystemd.yml
+++ b/.github/workflows/build-cysystemd.yml
@@ -245,6 +245,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cysystemd-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: cysystemd-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-cython.yml b/.github/workflows/build-cython.yml
index 4908dffb39..2dc02b1e19 100644
--- a/.github/workflows/build-cython.yml
+++ b/.github/workflows/build-cython.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cython-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cyvcf2.yml b/.github/workflows/build-cyvcf2.yml
index 6886fc031c..acfcc858f0 100644
--- a/.github/workflows/build-cyvcf2.yml
+++ b/.github/workflows/build-cyvcf2.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cyvcf2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-daft.yml b/.github/workflows/build-daft.yml
index 18a92abf24..48237d7abb 100644
--- a/.github/workflows/build-daft.yml
+++ b/.github/workflows/build-daft.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: daft-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-databento-dbn.yml b/.github/workflows/build-databento-dbn.yml
index 893edccea2..985d39fdca 100644
--- a/.github/workflows/build-databento-dbn.yml
+++ b/.github/workflows/build-databento-dbn.yml
@@ -142,5 +142,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: databento_dbn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-datasketches.yml b/.github/workflows/build-datasketches.yml
index 94c6f68560..fe7c91010e 100644
--- a/.github/workflows/build-datasketches.yml
+++ b/.github/workflows/build-datasketches.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: datasketches-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-datefinder.yml b/.github/workflows/build-datefinder.yml
index 7dc71d196e..9d01d4161a 100644
--- a/.github/workflows/build-datefinder.yml
+++ b/.github/workflows/build-datefinder.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: datefinder-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-davey.yml b/.github/workflows/build-davey.yml
index b1726fe225..ab2b0111d2 100644
--- a/.github/workflows/build-davey.yml
+++ b/.github/workflows/build-davey.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: davey-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dbt-extractor.yml b/.github/workflows/build-dbt-extractor.yml
index c7121cedea..b48965f06f 100644
--- a/.github/workflows/build-dbt-extractor.yml
+++ b/.github/workflows/build-dbt-extractor.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dbt-extractor-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ddtrace.yml b/.github/workflows/build-ddtrace.yml
index c0bada6252..ef9f200292 100644
--- a/.github/workflows/build-ddtrace.yml
+++ b/.github/workflows/build-ddtrace.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ddtrace-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-debugpy.yml b/.github/workflows/build-debugpy.yml
index f9115666a8..2049ea2f0b 100644
--- a/.github/workflows/build-debugpy.yml
+++ b/.github/workflows/build-debugpy.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: debugpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-decord.yml b/.github/workflows/build-decord.yml
index 876160801a..a0843ed4e6 100644
--- a/.github/workflows/build-decord.yml
+++ b/.github/workflows/build-decord.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: decord-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deflate.yml b/.github/workflows/build-deflate.yml
index 8c4bada7a5..96f24fa229 100644
--- a/.github/workflows/build-deflate.yml
+++ b/.github/workflows/build-deflate.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deflate-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml b/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml
index 65c8710b7a..1ab997c624 100644
--- a/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml
+++ b/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: delta-kernel-rust-sharing-wrapper-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deltalake.yml b/.github/workflows/build-deltalake.yml
index ab2bf812fa..1678c5caec 100644
--- a/.github/workflows/build-deltalake.yml
+++ b/.github/workflows/build-deltalake.yml
@@ -140,5 +140,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deltalake-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deltalite.yml b/.github/workflows/build-deltalite.yml
index a3cb924256..139fdf9271 100644
--- a/.github/workflows/build-deltalite.yml
+++ b/.github/workflows/build-deltalite.yml
@@ -164,5 +164,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deltalite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-demoparser2.yml b/.github/workflows/build-demoparser2.yml
index c166d9db6b..c95f717cbb 100644
--- a/.github/workflows/build-demoparser2.yml
+++ b/.github/workflows/build-demoparser2.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: demoparser2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dependency-injector.yml b/.github/workflows/build-dependency-injector.yml
index a9c7aae0a9..8428eade77 100644
--- a/.github/workflows/build-dependency-injector.yml
+++ b/.github/workflows/build-dependency-injector.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dependency-injector-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deptry.yml b/.github/workflows/build-deptry.yml
index e15f3b970b..e51a134f94 100644
--- a/.github/workflows/build-deptry.yml
+++ b/.github/workflows/build-deptry.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deptry-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-diptest.yml b/.github/workflows/build-diptest.yml
index 9a510f8f15..8540aafcd6 100644
--- a/.github/workflows/build-diptest.yml
+++ b/.github/workflows/build-diptest.yml
@@ -143,6 +143,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: diptest-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: diptest-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-djade.yml b/.github/workflows/build-djade.yml
index 0a1f38d035..90b6fc8e13 100644
--- a/.github/workflows/build-djade.yml
+++ b/.github/workflows/build-djade.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: djade-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-djlint.yml b/.github/workflows/build-djlint.yml
index e9412a188d..c3493af1fb 100644
--- a/.github/workflows/build-djlint.yml
+++ b/.github/workflows/build-djlint.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: djlint-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dlib-bin.yml b/.github/workflows/build-dlib-bin.yml
index 7ddc5ac4ac..0087be9259 100644
--- a/.github/workflows/build-dlib-bin.yml
+++ b/.github/workflows/build-dlib-bin.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dlib-bin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dm-tree.yml b/.github/workflows/build-dm-tree.yml
index 20dad5753b..b6e11593bc 100644
--- a/.github/workflows/build-dm-tree.yml
+++ b/.github/workflows/build-dm-tree.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dm-tree-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dnaio.yml b/.github/workflows/build-dnaio.yml
index 44cec43e87..14e57c03ef 100644
--- a/.github/workflows/build-dnaio.yml
+++ b/.github/workflows/build-dnaio.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dnaio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-docling-parse.yml b/.github/workflows/build-docling-parse.yml
index 8b7560378f..8af2ac980a 100644
--- a/.github/workflows/build-docling-parse.yml
+++ b/.github/workflows/build-docling-parse.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: docling-parse-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-doublemetaphone.yml b/.github/workflows/build-doublemetaphone.yml
index 997aac5fcf..0de528deb9 100644
--- a/.github/workflows/build-doublemetaphone.yml
+++ b/.github/workflows/build-doublemetaphone.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: doublemetaphone-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dprint-py.yml b/.github/workflows/build-dprint-py.yml
index f3839890aa..82dfbc866a 100644
--- a/.github/workflows/build-dprint-py.yml
+++ b/.github/workflows/build-dprint-py.yml
@@ -236,5 +236,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dprint-py-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-dracopy.yml b/.github/workflows/build-dracopy.yml
index 915faf4015..e5ed25e2e6 100644
--- a/.github/workflows/build-dracopy.yml
+++ b/.github/workflows/build-dracopy.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dracopy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dtaidistance.yml b/.github/workflows/build-dtaidistance.yml
index 3deb52a0ec..90213119a5 100644
--- a/.github/workflows/build-dtaidistance.yml
+++ b/.github/workflows/build-dtaidistance.yml
@@ -139,6 +139,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dtaidistance-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: dtaidistance-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-duckdb.yml b/.github/workflows/build-duckdb.yml
index 23089f2705..29fd79af46 100644
--- a/.github/workflows/build-duckdb.yml
+++ b/.github/workflows/build-duckdb.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: duckdb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dukpy.yml b/.github/workflows/build-dukpy.yml
index 50828760ca..3a9f1844bd 100644
--- a/.github/workflows/build-dukpy.yml
+++ b/.github/workflows/build-dukpy.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dukpy-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-dulwich.yml b/.github/workflows/build-dulwich.yml
index d7edc9046a..d691859b83 100644
--- a/.github/workflows/build-dulwich.yml
+++ b/.github/workflows/build-dulwich.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dulwich-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dumb-init.yml b/.github/workflows/build-dumb-init.yml
index 4dc1eabd0c..714be44b68 100644
--- a/.github/workflows/build-dumb-init.yml
+++ b/.github/workflows/build-dumb-init.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dumb-init-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-eccodeslib.yml b/.github/workflows/build-eccodeslib.yml
index b2013a7e2c..7c061ed079 100644
--- a/.github/workflows/build-eccodeslib.yml
+++ b/.github/workflows/build-eccodeslib.yml
@@ -259,5 +259,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: eccodeslib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ecos.yml b/.github/workflows/build-ecos.yml
index c3dd90d438..32b9b644cd 100644
--- a/.github/workflows/build-ecos.yml
+++ b/.github/workflows/build-ecos.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ecos-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-editdistance.yml b/.github/workflows/build-editdistance.yml
index cb53d8e346..ed8beca537 100644
--- a/.github/workflows/build-editdistance.yml
+++ b/.github/workflows/build-editdistance.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: editdistance-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-editdistpy.yml b/.github/workflows/build-editdistpy.yml
index f8ad2c7873..8e6983f4bb 100644
--- a/.github/workflows/build-editdistpy.yml
+++ b/.github/workflows/build-editdistpy.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: editdistpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-edlib.yml b/.github/workflows/build-edlib.yml
index 8e3a7e35b9..8c89d90b14 100644
--- a/.github/workflows/build-edlib.yml
+++ b/.github/workflows/build-edlib.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: edlib-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-edt.yml b/.github/workflows/build-edt.yml
index 8cd1669c1b..c4dbcff035 100644
--- a/.github/workflows/build-edt.yml
+++ b/.github/workflows/build-edt.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: edt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ephem.yml b/.github/workflows/build-ephem.yml
index 0d55682340..f9175e6d3e 100644
--- a/.github/workflows/build-ephem.yml
+++ b/.github/workflows/build-ephem.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ephem-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-espeakng-loader.yml b/.github/workflows/build-espeakng-loader.yml
index a704bda4f8..7262e62b4d 100644
--- a/.github/workflows/build-espeakng-loader.yml
+++ b/.github/workflows/build-espeakng-loader.yml
@@ -235,6 +235,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: espeakng-loader-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: espeakng-loader-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-extensionclass.yml b/.github/workflows/build-extensionclass.yml
index b1acd96c73..ef9d88fb0c 100644
--- a/.github/workflows/build-extensionclass.yml
+++ b/.github/workflows/build-extensionclass.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: extensionclass-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ezdxf.yml b/.github/workflows/build-ezdxf.yml
index 1444ac02b9..f978b90ed3 100644
--- a/.github/workflows/build-ezdxf.yml
+++ b/.github/workflows/build-ezdxf.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ezdxf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fabio.yml b/.github/workflows/build-fabio.yml
index c3a56893b7..43912fe3a1 100644
--- a/.github/workflows/build-fabio.yml
+++ b/.github/workflows/build-fabio.yml
@@ -158,5 +158,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fabio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-faiss-cpu.yml b/.github/workflows/build-faiss-cpu.yml
index 76b6638ce4..ddf2d5bf6d 100644
--- a/.github/workflows/build-faiss-cpu.yml
+++ b/.github/workflows/build-faiss-cpu.yml
@@ -145,6 +145,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: faiss-cpu-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: faiss-cpu-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-fast-diff-match-patch.yml b/.github/workflows/build-fast-diff-match-patch.yml
index 49d9dcf877..736ba27d58 100644
--- a/.github/workflows/build-fast-diff-match-patch.yml
+++ b/.github/workflows/build-fast-diff-match-patch.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-diff-match-patch-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-fast-histogram.yml b/.github/workflows/build-fast-histogram.yml
index 2312a421ce..abd7476d94 100644
--- a/.github/workflows/build-fast-histogram.yml
+++ b/.github/workflows/build-fast-histogram.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-histogram-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fast-simplification.yml b/.github/workflows/build-fast-simplification.yml
index 0cafda1acb..2653c56617 100644
--- a/.github/workflows/build-fast-simplification.yml
+++ b/.github/workflows/build-fast-simplification.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-simplification-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fast-walk.yml b/.github/workflows/build-fast-walk.yml
index 8afd1c5d07..1b2daa8d55 100644
--- a/.github/workflows/build-fast-walk.yml
+++ b/.github/workflows/build-fast-walk.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-walk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastavro.yml b/.github/workflows/build-fastavro.yml
index 0052195acf..299c60e323 100644
--- a/.github/workflows/build-fastavro.yml
+++ b/.github/workflows/build-fastavro.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastavro-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastcluster.yml b/.github/workflows/build-fastcluster.yml
index de38d0c25b..a33fb50406 100644
--- a/.github/workflows/build-fastcluster.yml
+++ b/.github/workflows/build-fastcluster.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastcluster-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastdigest.yml b/.github/workflows/build-fastdigest.yml
index 25f08c7dec..e89cf17f29 100644
--- a/.github/workflows/build-fastdigest.yml
+++ b/.github/workflows/build-fastdigest.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastdigest-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-faster-fifo.yml b/.github/workflows/build-faster-fifo.yml
index 60f8b35895..8a01ce3b56 100644
--- a/.github/workflows/build-faster-fifo.yml
+++ b/.github/workflows/build-faster-fifo.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: faster-fifo-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-fastexcel.yml b/.github/workflows/build-fastexcel.yml
index 23b07e28f2..2db923cd19 100644
--- a/.github/workflows/build-fastexcel.yml
+++ b/.github/workflows/build-fastexcel.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastexcel-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-fastnanoid.yml b/.github/workflows/build-fastnanoid.yml
index 98d0e1d4d4..8b06a33aa4 100644
--- a/.github/workflows/build-fastnanoid.yml
+++ b/.github/workflows/build-fastnanoid.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastnanoid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastnumbers.yml b/.github/workflows/build-fastnumbers.yml
index 0558c7c3a4..87236e2fa3 100644
--- a/.github/workflows/build-fastnumbers.yml
+++ b/.github/workflows/build-fastnumbers.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastnumbers-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastobo.yml b/.github/workflows/build-fastobo.yml
index 9aa45be565..1153521517 100644
--- a/.github/workflows/build-fastobo.yml
+++ b/.github/workflows/build-fastobo.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastobo-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastparquet.yml b/.github/workflows/build-fastparquet.yml
index b668ad841d..fb86d22077 100644
--- a/.github/workflows/build-fastparquet.yml
+++ b/.github/workflows/build-fastparquet.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastparquet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastremap.yml b/.github/workflows/build-fastremap.yml
index 7fb43dd6e6..887490f06c 100644
--- a/.github/workflows/build-fastremap.yml
+++ b/.github/workflows/build-fastremap.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastremap-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastsafetensors.yml b/.github/workflows/build-fastsafetensors.yml
index 07c8d1eaa6..f446e547e7 100644
--- a/.github/workflows/build-fastsafetensors.yml
+++ b/.github/workflows/build-fastsafetensors.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastsafetensors-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fasttext-predict.yml b/.github/workflows/build-fasttext-predict.yml
index df73cd01e3..8402010215 100644
--- a/.github/workflows/build-fasttext-predict.yml
+++ b/.github/workflows/build-fasttext-predict.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fasttext-predict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fasttext-wheel.yml b/.github/workflows/build-fasttext-wheel.yml
index f28c66aa76..4c07e237d3 100644
--- a/.github/workflows/build-fasttext-wheel.yml
+++ b/.github/workflows/build-fasttext-wheel.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fasttext-wheel-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastuuid.yml b/.github/workflows/build-fastuuid.yml
index 8f7e9684e7..8dd74ecb58 100644
--- a/.github/workflows/build-fastuuid.yml
+++ b/.github/workflows/build-fastuuid.yml
@@ -179,5 +179,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastuuid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastwarc.yml b/.github/workflows/build-fastwarc.yml
index 0e36f213ed..c6f2257016 100644
--- a/.github/workflows/build-fastwarc.yml
+++ b/.github/workflows/build-fastwarc.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastwarc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-faust-cchardet.yml b/.github/workflows/build-faust-cchardet.yml
index 393d6e97f4..8467e42e85 100644
--- a/.github/workflows/build-faust-cchardet.yml
+++ b/.github/workflows/build-faust-cchardet.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: faust-cchardet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fill-voids.yml b/.github/workflows/build-fill-voids.yml
index 6fd68e9ffd..c9608b1932 100644
--- a/.github/workflows/build-fill-voids.yml
+++ b/.github/workflows/build-fill-voids.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fill-voids-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fiona.yml b/.github/workflows/build-fiona.yml
index 006c0cd16f..846861f114 100644
--- a/.github/workflows/build-fiona.yml
+++ b/.github/workflows/build-fiona.yml
@@ -556,5 +556,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fiona-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-firecrawl-anydoc.yml b/.github/workflows/build-firecrawl-anydoc.yml
index a77605345e..943a70b3a8 100644
--- a/.github/workflows/build-firecrawl-anydoc.yml
+++ b/.github/workflows/build-firecrawl-anydoc.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: firecrawl_anydoc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-flpc.yml b/.github/workflows/build-flpc.yml
index 20493f494b..d23d031813 100644
--- a/.github/workflows/build-flpc.yml
+++ b/.github/workflows/build-flpc.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: flpc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fnv-hash-fast.yml b/.github/workflows/build-fnv-hash-fast.yml
index b8e926b4e3..fb5fc5229a 100644
--- a/.github/workflows/build-fnv-hash-fast.yml
+++ b/.github/workflows/build-fnv-hash-fast.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fnv-hash-fast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fonttools.yml b/.github/workflows/build-fonttools.yml
index 3e77af6b9b..c97e969480 100644
--- a/.github/workflows/build-fonttools.yml
+++ b/.github/workflows/build-fonttools.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fonttools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-freetype-py.yml b/.github/workflows/build-freetype-py.yml
index aeec6f1e69..380487f77c 100644
--- a/.github/workflows/build-freetype-py.yml
+++ b/.github/workflows/build-freetype-py.yml
@@ -140,5 +140,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: freetype-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fugashi.yml b/.github/workflows/build-fugashi.yml
index 3b6cf16147..0bda9c17ac 100644
--- a/.github/workflows/build-fugashi.yml
+++ b/.github/workflows/build-fugashi.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fugashi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fuzzysearch.yml b/.github/workflows/build-fuzzysearch.yml
index 500ff7794c..5c8566e94a 100644
--- a/.github/workflows/build-fuzzysearch.yml
+++ b/.github/workflows/build-fuzzysearch.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fuzzysearch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fuzzyset2.yml b/.github/workflows/build-fuzzyset2.yml
index a4ec309cee..5a3514378a 100644
--- a/.github/workflows/build-fuzzyset2.yml
+++ b/.github/workflows/build-fuzzyset2.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fuzzyset2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gdstk.yml b/.github/workflows/build-gdstk.yml
index 6aeeea2269..5172a8f23b 100644
--- a/.github/workflows/build-gdstk.yml
+++ b/.github/workflows/build-gdstk.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gdstk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gemmi.yml b/.github/workflows/build-gemmi.yml
index 68da4d00ff..c7a712ac05 100644
--- a/.github/workflows/build-gemmi.yml
+++ b/.github/workflows/build-gemmi.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gemmi-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-gensim.yml b/.github/workflows/build-gensim.yml
index d77fba1f85..23b7ccff27 100644
--- a/.github/workflows/build-gensim.yml
+++ b/.github/workflows/build-gensim.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gensim-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gevent.yml b/.github/workflows/build-gevent.yml
index 0532cc06a3..507af1221a 100644
--- a/.github/workflows/build-gevent.yml
+++ b/.github/workflows/build-gevent.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gevent-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-geventhttpclient.yml b/.github/workflows/build-geventhttpclient.yml
index 34d679be23..dc0d5d1e85 100644
--- a/.github/workflows/build-geventhttpclient.yml
+++ b/.github/workflows/build-geventhttpclient.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: geventhttpclient-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gilknocker.yml b/.github/workflows/build-gilknocker.yml
index 103a9d1782..11c2093c7f 100644
--- a/.github/workflows/build-gilknocker.yml
+++ b/.github/workflows/build-gilknocker.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gilknocker-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-git-cliff.yml b/.github/workflows/build-git-cliff.yml
index adb4a5af2e..824201cde3 100644
--- a/.github/workflows/build-git-cliff.yml
+++ b/.github/workflows/build-git-cliff.yml
@@ -181,5 +181,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: git-cliff-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-glcontext.yml b/.github/workflows/build-glcontext.yml
index 4ed8935576..902937bda8 100644
--- a/.github/workflows/build-glcontext.yml
+++ b/.github/workflows/build-glcontext.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: glcontext-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-glfw.yml b/.github/workflows/build-glfw.yml
index 62bd401405..d65da0d6ea 100644
--- a/.github/workflows/build-glfw.yml
+++ b/.github/workflows/build-glfw.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: glfw-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gmpy2.yml b/.github/workflows/build-gmpy2.yml
index 220c4b83a9..8c836ab1c3 100644
--- a/.github/workflows/build-gmpy2.yml
+++ b/.github/workflows/build-gmpy2.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gmpy2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gmsh.yml b/.github/workflows/build-gmsh.yml
index dc1b50b12d..861807cfb3 100644
--- a/.github/workflows/build-gmsh.yml
+++ b/.github/workflows/build-gmsh.yml
@@ -147,5 +147,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gmsh-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gnureadline.yml b/.github/workflows/build-gnureadline.yml
index 8010f464cc..8bb2863565 100644
--- a/.github/workflows/build-gnureadline.yml
+++ b/.github/workflows/build-gnureadline.yml
@@ -134,6 +134,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gnureadline-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: gnureadline-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-google-crc32c.yml b/.github/workflows/build-google-crc32c.yml
index 61f8a8951e..b644da6663 100644
--- a/.github/workflows/build-google-crc32c.yml
+++ b/.github/workflows/build-google-crc32c.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: google-crc32c-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-google-re2.yml b/.github/workflows/build-google-re2.yml
index a01ea854be..38ae3037bc 100644
--- a/.github/workflows/build-google-re2.yml
+++ b/.github/workflows/build-google-re2.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: google-re2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gpiod.yml b/.github/workflows/build-gpiod.yml
index 908da68e0a..d2e23b7919 100644
--- a/.github/workflows/build-gpiod.yml
+++ b/.github/workflows/build-gpiod.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gpiod-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-granian.yml b/.github/workflows/build-granian.yml
index 1bfdeb413c..8b6fdcdbc3 100644
--- a/.github/workflows/build-granian.yml
+++ b/.github/workflows/build-granian.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: granian-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-grimp.yml b/.github/workflows/build-grimp.yml
index 5e3a71521a..0ec3fa06a1 100644
--- a/.github/workflows/build-grimp.yml
+++ b/.github/workflows/build-grimp.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: grimp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-grpcio-tools.yml b/.github/workflows/build-grpcio-tools.yml
index ea44d6de59..4c2369abc0 100644
--- a/.github/workflows/build-grpcio-tools.yml
+++ b/.github/workflows/build-grpcio-tools.yml
@@ -163,5 +163,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: grpcio-tools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-grpcio.yml b/.github/workflows/build-grpcio.yml
index 3efe74a716..df671a9f17 100644
--- a/.github/workflows/build-grpcio.yml
+++ b/.github/workflows/build-grpcio.yml
@@ -152,5 +152,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: grpcio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-guppy3.yml b/.github/workflows/build-guppy3.yml
index 4d134d54bc..0a246f436f 100644
--- a/.github/workflows/build-guppy3.yml
+++ b/.github/workflows/build-guppy3.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: guppy3-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-h3.yml b/.github/workflows/build-h3.yml
index 5c360ad966..750b0bda20 100644
--- a/.github/workflows/build-h3.yml
+++ b/.github/workflows/build-h3.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: h3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-h5py.yml b/.github/workflows/build-h5py.yml
index 0b73134536..dff122327d 100644
--- a/.github/workflows/build-h5py.yml
+++ b/.github/workflows/build-h5py.yml
@@ -172,5 +172,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: h5py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-habluetooth.yml b/.github/workflows/build-habluetooth.yml
index 95f87607b2..8df531b6e7 100644
--- a/.github/workflows/build-habluetooth.yml
+++ b/.github/workflows/build-habluetooth.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: habluetooth-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hdbscan.yml b/.github/workflows/build-hdbscan.yml
index d5ec33b0d5..252fb3ea14 100644
--- a/.github/workflows/build-hdbscan.yml
+++ b/.github/workflows/build-hdbscan.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hdbscan-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hdf5plugin.yml b/.github/workflows/build-hdf5plugin.yml
index fbea70ac4f..9d19e26b98 100644
--- a/.github/workflows/build-hdf5plugin.yml
+++ b/.github/workflows/build-hdf5plugin.yml
@@ -151,5 +151,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hdf5plugin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hdrhistogram.yml b/.github/workflows/build-hdrhistogram.yml
index 19b58f25d3..82ddad91cf 100644
--- a/.github/workflows/build-hdrhistogram.yml
+++ b/.github/workflows/build-hdrhistogram.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hdrhistogram-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-hf-xet.yml b/.github/workflows/build-hf-xet.yml
index 4ea2ac7b64..efc175c425 100644
--- a/.github/workflows/build-hf-xet.yml
+++ b/.github/workflows/build-hf-xet.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hf-xet-${{ matrix.version }}-*-riscv64
diff --git a/.github/workflows/build-hidapi.yml b/.github/workflows/build-hidapi.yml
index 2aa92f8a18..cba97d8dc0 100644
--- a/.github/workflows/build-hidapi.yml
+++ b/.github/workflows/build-hidapi.yml
@@ -211,6 +211,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hidapi-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: hidapi-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-highspy.yml b/.github/workflows/build-highspy.yml
index 61faef124f..b70549ac49 100644
--- a/.github/workflows/build-highspy.yml
+++ b/.github/workflows/build-highspy.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: highspy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hiredis.yml b/.github/workflows/build-hiredis.yml
index 8de78acef4..3e1bd29b34 100644
--- a/.github/workflows/build-hiredis.yml
+++ b/.github/workflows/build-hiredis.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hiredis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hmmlearn.yml b/.github/workflows/build-hmmlearn.yml
index 0df13b41cd..7e818db916 100644
--- a/.github/workflows/build-hmmlearn.yml
+++ b/.github/workflows/build-hmmlearn.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hmmlearn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hogql-parser-rs.yml b/.github/workflows/build-hogql-parser-rs.yml
index 7620779967..2d00b612d3 100644
--- a/.github/workflows/build-hogql-parser-rs.yml
+++ b/.github/workflows/build-hogql-parser-rs.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hogql-parser-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hogql-parser.yml b/.github/workflows/build-hogql-parser.yml
index 1427ce7dc6..0b9072665c 100644
--- a/.github/workflows/build-hogql-parser.yml
+++ b/.github/workflows/build-hogql-parser.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hogql-parser-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-html-to-markdown.yml b/.github/workflows/build-html-to-markdown.yml
index 09c481a324..d59b3adc69 100644
--- a/.github/workflows/build-html-to-markdown.yml
+++ b/.github/workflows/build-html-to-markdown.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: html-to-markdown-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-httpr.yml b/.github/workflows/build-httpr.yml
index 385cfa0da6..bbc2f12bbc 100644
--- a/.github/workflows/build-httpr.yml
+++ b/.github/workflows/build-httpr.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: httpr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hypothesis.yml b/.github/workflows/build-hypothesis.yml
index 013b25588b..28151d7511 100644
--- a/.github/workflows/build-hypothesis.yml
+++ b/.github/workflows/build-hypothesis.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hypothesis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-igraph.yml b/.github/workflows/build-igraph.yml
index aaf8e3b71d..437fe3cd0c 100644
--- a/.github/workflows/build-igraph.yml
+++ b/.github/workflows/build-igraph.yml
@@ -187,6 +187,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: igraph-${{ matrix.version }}-*riscv64
       gpl-sources-artifact: igraph-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-ijson.yml b/.github/workflows/build-ijson.yml
index 706f439fd9..0aa02756ce 100644
--- a/.github/workflows/build-ijson.yml
+++ b/.github/workflows/build-ijson.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ijson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-imagecodecs.yml b/.github/workflows/build-imagecodecs.yml
index 046f6978f1..699dc0c280 100644
--- a/.github/workflows/build-imagecodecs.yml
+++ b/.github/workflows/build-imagecodecs.yml
@@ -164,5 +164,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: imagecodecs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-imgui.yml b/.github/workflows/build-imgui.yml
index 9d7be78507..326b8acaa3 100644
--- a/.github/workflows/build-imgui.yml
+++ b/.github/workflows/build-imgui.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: imgui-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-iminuit.yml b/.github/workflows/build-iminuit.yml
index e0d6b1c7c1..263a5dcf83 100644
--- a/.github/workflows/build-iminuit.yml
+++ b/.github/workflows/build-iminuit.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: iminuit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-immutables.yml b/.github/workflows/build-immutables.yml
index 11b2d3ab34..8c85caff4c 100644
--- a/.github/workflows/build-immutables.yml
+++ b/.github/workflows/build-immutables.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: immutables-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-impit.yml b/.github/workflows/build-impit.yml
index 2eaea00eb9..3bc6ff4f35 100644
--- a/.github/workflows/build-impit.yml
+++ b/.github/workflows/build-impit.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: impit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-indexed-gzip.yml b/.github/workflows/build-indexed-gzip.yml
index 6823988c9f..b0c6cea81c 100644
--- a/.github/workflows/build-indexed-gzip.yml
+++ b/.github/workflows/build-indexed-gzip.yml
@@ -152,5 +152,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: indexed-gzip-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-inflate64.yml b/.github/workflows/build-inflate64.yml
index 2cb66c0c33..9eca035cee 100644
--- a/.github/workflows/build-inflate64.yml
+++ b/.github/workflows/build-inflate64.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: inflate64-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-intbitset.yml b/.github/workflows/build-intbitset.yml
index dbb1c656ed..4ce9d06388 100644
--- a/.github/workflows/build-intbitset.yml
+++ b/.github/workflows/build-intbitset.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: intbitset-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-isal.yml b/.github/workflows/build-isal.yml
index 00a718fcf2..01fbd6fd67 100644
--- a/.github/workflows/build-isal.yml
+++ b/.github/workflows/build-isal.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: isal-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-islpy.yml b/.github/workflows/build-islpy.yml
index bb5fd3580b..b60bfee928 100644
--- a/.github/workflows/build-islpy.yml
+++ b/.github/workflows/build-islpy.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: islpy-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-iteration-utilities.yml b/.github/workflows/build-iteration-utilities.yml
index a36af1cf4a..e432d3dcb9 100644
--- a/.github/workflows/build-iteration-utilities.yml
+++ b/.github/workflows/build-iteration-utilities.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: iteration-utilities-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jellyfish.yml b/.github/workflows/build-jellyfish.yml
index 411b7686c5..548f95346d 100644
--- a/.github/workflows/build-jellyfish.yml
+++ b/.github/workflows/build-jellyfish.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jellyfish-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jenkspy.yml b/.github/workflows/build-jenkspy.yml
index 090b837d7a..0353a5ad15 100644
--- a/.github/workflows/build-jenkspy.yml
+++ b/.github/workflows/build-jenkspy.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jenkspy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jpype1.yml b/.github/workflows/build-jpype1.yml
index 65b073ce6a..cbfe7da5c8 100644
--- a/.github/workflows/build-jpype1.yml
+++ b/.github/workflows/build-jpype1.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jpype1-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jq.yml b/.github/workflows/build-jq.yml
index b923e96c96..e845f938d0 100644
--- a/.github/workflows/build-jq.yml
+++ b/.github/workflows/build-jq.yml
@@ -151,5 +151,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jq-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-json-stream-rs-tokenizer.yml b/.github/workflows/build-json-stream-rs-tokenizer.yml
index 4a3a7a62a9..f58c0c6de1 100644
--- a/.github/workflows/build-json-stream-rs-tokenizer.yml
+++ b/.github/workflows/build-json-stream-rs-tokenizer.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: json-stream-rs-tokenizer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsoncompat.yml b/.github/workflows/build-jsoncompat.yml
index 4055646163..838affc488 100644
--- a/.github/workflows/build-jsoncompat.yml
+++ b/.github/workflows/build-jsoncompat.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsoncompat-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsonnet.yml b/.github/workflows/build-jsonnet.yml
index 16612fad09..604b9bd99b 100644
--- a/.github/workflows/build-jsonnet.yml
+++ b/.github/workflows/build-jsonnet.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonnet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsonobject.yml b/.github/workflows/build-jsonobject.yml
index 12542050f1..76a03bff5c 100644
--- a/.github/workflows/build-jsonobject.yml
+++ b/.github/workflows/build-jsonobject.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonobject-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-jsonpath-rust-bindings.yml b/.github/workflows/build-jsonpath-rust-bindings.yml
index a0b0436c80..bbe91e6736 100644
--- a/.github/workflows/build-jsonpath-rust-bindings.yml
+++ b/.github/workflows/build-jsonpath-rust-bindings.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonpath-rust-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsonschema-rs.yml b/.github/workflows/build-jsonschema-rs.yml
index f64a636a34..ab85f7e621 100644
--- a/.github/workflows/build-jsonschema-rs.yml
+++ b/.github/workflows/build-jsonschema-rs.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonschema_rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-just-bin.yml b/.github/workflows/build-just-bin.yml
index 5ddb228d32..6ec23eaed8 100644
--- a/.github/workflows/build-just-bin.yml
+++ b/.github/workflows/build-just-bin.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: just-bin-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-kaldi-native-fbank.yml b/.github/workflows/build-kaldi-native-fbank.yml
index b2a174f2a3..ba35b64202 100644
--- a/.github/workflows/build-kaldi-native-fbank.yml
+++ b/.github/workflows/build-kaldi-native-fbank.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: kaldi-native-fbank-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-kaldialign.yml b/.github/workflows/build-kaldialign.yml
index e36b7c565f..ca620af0ec 100644
--- a/.github/workflows/build-kaldialign.yml
+++ b/.github/workflows/build-kaldialign.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: kaldialign-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-keystone-engine.yml b/.github/workflows/build-keystone-engine.yml
index 017e65bdeb..17c1da3c02 100644
--- a/.github/workflows/build-keystone-engine.yml
+++ b/.github/workflows/build-keystone-engine.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: keystone-engine-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-kornia-rs.yml b/.github/workflows/build-kornia-rs.yml
index a9a6fffd8f..555d9fdb18 100644
--- a/.github/workflows/build-kornia-rs.yml
+++ b/.github/workflows/build-kornia-rs.yml
@@ -146,5 +146,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: kornia-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-labmaze.yml b/.github/workflows/build-labmaze.yml
index db279644f7..3ef63aa8f0 100644
--- a/.github/workflows/build-labmaze.yml
+++ b/.github/workflows/build-labmaze.yml
@@ -298,5 +298,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: labmaze-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lameenc.yml b/.github/workflows/build-lameenc.yml
index 5e14789b2b..7b510ea2cf 100644
--- a/.github/workflows/build-lameenc.yml
+++ b/.github/workflows/build-lameenc.yml
@@ -167,6 +167,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lameenc-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: lameenc-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-lancedb.yml b/.github/workflows/build-lancedb.yml
index edaed86b91..683d76042a 100644
--- a/.github/workflows/build-lancedb.yml
+++ b/.github/workflows/build-lancedb.yml
@@ -221,5 +221,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lancedb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lap.yml b/.github/workflows/build-lap.yml
index a78c97fc44..3316158eb3 100644
--- a/.github/workflows/build-lap.yml
+++ b/.github/workflows/build-lap.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lap-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lapx.yml b/.github/workflows/build-lapx.yml
index 8687b6a58e..948ce36387 100644
--- a/.github/workflows/build-lapx.yml
+++ b/.github/workflows/build-lapx.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lapx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-laszip.yml b/.github/workflows/build-laszip.yml
index 1795538e19..f4f1904a09 100644
--- a/.github/workflows/build-laszip.yml
+++ b/.github/workflows/build-laszip.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: laszip-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lazrs.yml b/.github/workflows/build-lazrs.yml
index d899356606..36cb9c2bdb 100644
--- a/.github/workflows/build-lazrs.yml
+++ b/.github/workflows/build-lazrs.yml
@@ -172,5 +172,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lazrs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lazy-object-proxy.yml b/.github/workflows/build-lazy-object-proxy.yml
index 2650c41f98..d13ce780e2 100644
--- a/.github/workflows/build-lazy-object-proxy.yml
+++ b/.github/workflows/build-lazy-object-proxy.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lazy-object-proxy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-levenshtein.yml b/.github/workflows/build-levenshtein.yml
index ea5a3f83f7..149361b2bc 100644
--- a/.github/workflows/build-levenshtein.yml
+++ b/.github/workflows/build-levenshtein.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: levenshtein-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-libclang.yml b/.github/workflows/build-libclang.yml
index 54bd321b5c..8194dd4f8f 100644
--- a/.github/workflows/build-libclang.yml
+++ b/.github/workflows/build-libclang.yml
@@ -158,6 +158,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libclang-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: libclang-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-libigl.yml b/.github/workflows/build-libigl.yml
index 9dbbeaaa49..e86cb9e8e5 100644
--- a/.github/workflows/build-libigl.yml
+++ b/.github/workflows/build-libigl.yml
@@ -161,5 +161,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libigl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-libsass.yml b/.github/workflows/build-libsass.yml
index b8e7ebc6a0..89f498a294 100644
--- a/.github/workflows/build-libsass.yml
+++ b/.github/workflows/build-libsass.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libsass-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-libscrc.yml b/.github/workflows/build-libscrc.yml
index a0efb81042..5f2ed250e5 100644
--- a/.github/workflows/build-libscrc.yml
+++ b/.github/workflows/build-libscrc.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libscrc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-libusb-package.yml b/.github/workflows/build-libusb-package.yml
index 8c59521376..d16a7ac1e1 100644
--- a/.github/workflows/build-libusb-package.yml
+++ b/.github/workflows/build-libusb-package.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libusb-package-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-libvalkey.yml b/.github/workflows/build-libvalkey.yml
index 052c5e773d..d9d4f55e96 100644
--- a/.github/workflows/build-libvalkey.yml
+++ b/.github/workflows/build-libvalkey.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libvalkey-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lightgbm.yml b/.github/workflows/build-lightgbm.yml
index 2fe7beef66..8ec7d5f444 100644
--- a/.github/workflows/build-lightgbm.yml
+++ b/.github/workflows/build-lightgbm.yml
@@ -196,5 +196,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lightgbm-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lilcom.yml b/.github/workflows/build-lilcom.yml
index bbbab6f9f9..1cd57c8f6e 100644
--- a/.github/workflows/build-lilcom.yml
+++ b/.github/workflows/build-lilcom.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lilcom-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-line-profiler.yml b/.github/workflows/build-line-profiler.yml
index ae0a610192..b3d1ca0e46 100644
--- a/.github/workflows/build-line-profiler.yml
+++ b/.github/workflows/build-line-profiler.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: line-profiler-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-lingua-language-detector.yml b/.github/workflows/build-lingua-language-detector.yml
index 864c26531c..15794c5d4e 100644
--- a/.github/workflows/build-lingua-language-detector.yml
+++ b/.github/workflows/build-lingua-language-detector.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lingua_language_detector-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-litellm.yml b/.github/workflows/build-litellm.yml
index 486efee2d5..16c9f28427 100644
--- a/.github/workflows/build-litellm.yml
+++ b/.github/workflows/build-litellm.yml
@@ -219,5 +219,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: litellm-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-littlefs-python.yml b/.github/workflows/build-littlefs-python.yml
index 7bf839c427..da235d42e6 100644
--- a/.github/workflows/build-littlefs-python.yml
+++ b/.github/workflows/build-littlefs-python.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: littlefs-python-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-livekit-blingfire.yml b/.github/workflows/build-livekit-blingfire.yml
index 70103f1681..97a3eba193 100644
--- a/.github/workflows/build-livekit-blingfire.yml
+++ b/.github/workflows/build-livekit-blingfire.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: livekit-blingfire-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lmdb.yml b/.github/workflows/build-lmdb.yml
index 0132a7dcac..a1e338116a 100644
--- a/.github/workflows/build-lmdb.yml
+++ b/.github/workflows/build-lmdb.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lmdb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lmnr-claude-code-proxy.yml b/.github/workflows/build-lmnr-claude-code-proxy.yml
index 14021910e7..f08dfc601f 100644
--- a/.github/workflows/build-lmnr-claude-code-proxy.yml
+++ b/.github/workflows/build-lmnr-claude-code-proxy.yml
@@ -239,5 +239,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lmnr-claude-code-proxy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-logbook.yml b/.github/workflows/build-logbook.yml
index 5c1ee2b8dd..89d18d67a7 100644
--- a/.github/workflows/build-logbook.yml
+++ b/.github/workflows/build-logbook.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: logbook-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-loro.yml b/.github/workflows/build-loro.yml
index a26abb99ff..6bc46469b2 100644
--- a/.github/workflows/build-loro.yml
+++ b/.github/workflows/build-loro.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: loro-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lru-dict.yml b/.github/workflows/build-lru-dict.yml
index 35e6f3094b..80211057a1 100644
--- a/.github/workflows/build-lru-dict.yml
+++ b/.github/workflows/build-lru-dict.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lru-dict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lz4.yml b/.github/workflows/build-lz4.yml
index 25603e8987..10eb807984 100644
--- a/.github/workflows/build-lz4.yml
+++ b/.github/workflows/build-lz4.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lz4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lzallright.yml b/.github/workflows/build-lzallright.yml
index 7fce2c7dc1..f9db017274 100644
--- a/.github/workflows/build-lzallright.yml
+++ b/.github/workflows/build-lzallright.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lzallright-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lzfse.yml b/.github/workflows/build-lzfse.yml
index b1df54dfad..a0b371dd8c 100644
--- a/.github/workflows/build-lzfse.yml
+++ b/.github/workflows/build-lzfse.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lzfse-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-magika.yml b/.github/workflows/build-magika.yml
index dd44e8ceec..84faad6212 100644
--- a/.github/workflows/build-magika.yml
+++ b/.github/workflows/build-magika.yml
@@ -224,5 +224,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: magika-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-manifold3d.yml b/.github/workflows/build-manifold3d.yml
index 481a780da5..791dac17a1 100644
--- a/.github/workflows/build-manifold3d.yml
+++ b/.github/workflows/build-manifold3d.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: manifold3d-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mapbox-earcut.yml b/.github/workflows/build-mapbox-earcut.yml
index a81e047283..35216e5ce5 100644
--- a/.github/workflows/build-mapbox-earcut.yml
+++ b/.github/workflows/build-mapbox-earcut.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mapbox-earcut-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-marisa-trie.yml b/.github/workflows/build-marisa-trie.yml
index 442869599b..6633f52878 100644
--- a/.github/workflows/build-marisa-trie.yml
+++ b/.github/workflows/build-marisa-trie.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: marisa-trie-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-markdown-it-pyrs.yml b/.github/workflows/build-markdown-it-pyrs.yml
index bb0a4d9c69..dbafa3dbba 100644
--- a/.github/workflows/build-markdown-it-pyrs.yml
+++ b/.github/workflows/build-markdown-it-pyrs.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: markdown-it-pyrs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-matplotlib.yml b/.github/workflows/build-matplotlib.yml
index 55f1699049..0a1dc49100 100644
--- a/.github/workflows/build-matplotlib.yml
+++ b/.github/workflows/build-matplotlib.yml
@@ -207,5 +207,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: matplotlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-maxminddb.yml b/.github/workflows/build-maxminddb.yml
index 8dc1dfa770..34fcdc96b9 100644
--- a/.github/workflows/build-maxminddb.yml
+++ b/.github/workflows/build-maxminddb.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: maxminddb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mecab-python3.yml b/.github/workflows/build-mecab-python3.yml
index cfe39a599e..b5a1218dd8 100644
--- a/.github/workflows/build-mecab-python3.yml
+++ b/.github/workflows/build-mecab-python3.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mecab-python3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mecab.yml b/.github/workflows/build-mecab.yml
index 43cb84cba4..f6cbb95bb6 100644
--- a/.github/workflows/build-mecab.yml
+++ b/.github/workflows/build-mecab.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mecab-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-memory-allocator.yml b/.github/workflows/build-memory-allocator.yml
index f30891650f..85e143fd5a 100644
--- a/.github/workflows/build-memory-allocator.yml
+++ b/.github/workflows/build-memory-allocator.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: memory-allocator-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-memray.yml b/.github/workflows/build-memray.yml
index eef1e00a8b..d836ec6079 100644
--- a/.github/workflows/build-memray.yml
+++ b/.github/workflows/build-memray.yml
@@ -236,6 +236,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: memray-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: memray-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-mgrs.yml b/.github/workflows/build-mgrs.yml
index 4138061a34..b8331b289e 100644
--- a/.github/workflows/build-mgrs.yml
+++ b/.github/workflows/build-mgrs.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mgrs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-miniaudio.yml b/.github/workflows/build-miniaudio.yml
index 79d40d99ff..8eb0a9d283 100644
--- a/.github/workflows/build-miniaudio.yml
+++ b/.github/workflows/build-miniaudio.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: miniaudio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-minify-html.yml b/.github/workflows/build-minify-html.yml
index baf0d9071a..0457542d69 100644
--- a/.github/workflows/build-minify-html.yml
+++ b/.github/workflows/build-minify-html.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: minify-html-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-minijinja.yml b/.github/workflows/build-minijinja.yml
index 156b47a779..e3203631ee 100644
--- a/.github/workflows/build-minijinja.yml
+++ b/.github/workflows/build-minijinja.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: minijinja-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-miniupnpc.yml b/.github/workflows/build-miniupnpc.yml
index 45015e6cc3..fdfc59e7ab 100644
--- a/.github/workflows/build-miniupnpc.yml
+++ b/.github/workflows/build-miniupnpc.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: miniupnpc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-minorminer.yml b/.github/workflows/build-minorminer.yml
index ceb8391448..3effd66933 100644
--- a/.github/workflows/build-minorminer.yml
+++ b/.github/workflows/build-minorminer.yml
@@ -170,5 +170,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: minorminer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mitmproxy-rs.yml b/.github/workflows/build-mitmproxy-rs.yml
index a6fa3805af..fccced0249 100644
--- a/.github/workflows/build-mitmproxy-rs.yml
+++ b/.github/workflows/build-mitmproxy-rs.yml
@@ -206,5 +206,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mitmproxy-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mlx.yml b/.github/workflows/build-mlx.yml
index 07448a7213..f477312b7a 100644
--- a/.github/workflows/build-mlx.yml
+++ b/.github/workflows/build-mlx.yml
@@ -315,6 +315,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mlx-${{ matrix.version }}-cp3*-manylinux_riscv64
 
@@ -330,6 +332,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mlx_cpu-${{ matrix.version }}-manylinux_riscv64
       gpl-sources-artifact: mlx-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-mmcif.yml b/.github/workflows/build-mmcif.yml
index f900762613..54115700de 100644
--- a/.github/workflows/build-mmcif.yml
+++ b/.github/workflows/build-mmcif.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mmcif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mmh3.yml b/.github/workflows/build-mmh3.yml
index 2551def254..72c0f04b5a 100644
--- a/.github/workflows/build-mmh3.yml
+++ b/.github/workflows/build-mmh3.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mmh3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mmhash3.yml b/.github/workflows/build-mmhash3.yml
index 5759130b4f..2a48abdbda 100644
--- a/.github/workflows/build-mmhash3.yml
+++ b/.github/workflows/build-mmhash3.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mmhash3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-moderngl.yml b/.github/workflows/build-moderngl.yml
index 01fcb61df2..f71a7305b8 100644
--- a/.github/workflows/build-moderngl.yml
+++ b/.github/workflows/build-moderngl.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: moderngl-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-mojimoji.yml b/.github/workflows/build-mojimoji.yml
index 5cf76e3dac..98e0bc89b1 100644
--- a/.github/workflows/build-mojimoji.yml
+++ b/.github/workflows/build-mojimoji.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mojimoji-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-moocore.yml b/.github/workflows/build-moocore.yml
index 19c6ddb286..ba4158dc41 100644
--- a/.github/workflows/build-moocore.yml
+++ b/.github/workflows/build-moocore.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: moocore-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-moyopy.yml b/.github/workflows/build-moyopy.yml
index 43b165d42b..e70a6c6c37 100644
--- a/.github/workflows/build-moyopy.yml
+++ b/.github/workflows/build-moyopy.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: moyopy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mpi4py.yml b/.github/workflows/build-mpi4py.yml
index c8521a11ae..1aa58bb29b 100644
--- a/.github/workflows/build-mpi4py.yml
+++ b/.github/workflows/build-mpi4py.yml
@@ -159,5 +159,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mpi4py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mrml.yml b/.github/workflows/build-mrml.yml
index 2d853f0391..6482a3b488 100644
--- a/.github/workflows/build-mrml.yml
+++ b/.github/workflows/build-mrml.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mrml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mujoco.yml b/.github/workflows/build-mujoco.yml
index 0969126c19..19f1813c7e 100644
--- a/.github/workflows/build-mujoco.yml
+++ b/.github/workflows/build-mujoco.yml
@@ -222,5 +222,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mujoco-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-murmurhash.yml b/.github/workflows/build-murmurhash.yml
index 1d30138391..a48e8ec5ef 100644
--- a/.github/workflows/build-murmurhash.yml
+++ b/.github/workflows/build-murmurhash.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: murmurhash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-murmurhash2.yml b/.github/workflows/build-murmurhash2.yml
index a65681419b..25ea473fac 100644
--- a/.github/workflows/build-murmurhash2.yml
+++ b/.github/workflows/build-murmurhash2.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: murmurhash2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mutf8.yml b/.github/workflows/build-mutf8.yml
index 887f271536..cdee1c8745 100644
--- a/.github/workflows/build-mutf8.yml
+++ b/.github/workflows/build-mutf8.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mutf8-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-mwparserfromhell.yml b/.github/workflows/build-mwparserfromhell.yml
index 4e2bd99866..115665e64c 100644
--- a/.github/workflows/build-mwparserfromhell.yml
+++ b/.github/workflows/build-mwparserfromhell.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mwparserfromhell-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-mypy.yml b/.github/workflows/build-mypy.yml
index 2502e52dbf..4c15ef8d29 100644
--- a/.github/workflows/build-mypy.yml
+++ b/.github/workflows/build-mypy.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mypy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mysql-connector-python.yml b/.github/workflows/build-mysql-connector-python.yml
index 3debd0c681..d76604bf8d 100644
--- a/.github/workflows/build-mysql-connector-python.yml
+++ b/.github/workflows/build-mysql-connector-python.yml
@@ -175,6 +175,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mysql-connector-python-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: mysql-connector-python-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-ncompress.yml b/.github/workflows/build-ncompress.yml
index b810326cf6..c671b37f0b 100644
--- a/.github/workflows/build-ncompress.yml
+++ b/.github/workflows/build-ncompress.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ncompress-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ndindex.yml b/.github/workflows/build-ndindex.yml
index ab1a2077d3..6ec73eee22 100644
--- a/.github/workflows/build-ndindex.yml
+++ b/.github/workflows/build-ndindex.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ndindex-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-nemo-relay.yml b/.github/workflows/build-nemo-relay.yml
index 2017cb0ff0..9e5b1349ab 100644
--- a/.github/workflows/build-nemo-relay.yml
+++ b/.github/workflows/build-nemo-relay.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: nemo-relay-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netcdf4.yml b/.github/workflows/build-netcdf4.yml
index e1c178e416..3d603af736 100644
--- a/.github/workflows/build-netcdf4.yml
+++ b/.github/workflows/build-netcdf4.yml
@@ -238,5 +238,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netcdf4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netifaces-plus.yml b/.github/workflows/build-netifaces-plus.yml
index de592226a8..905048bc34 100644
--- a/.github/workflows/build-netifaces-plus.yml
+++ b/.github/workflows/build-netifaces-plus.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netifaces-plus-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netifaces.yml b/.github/workflows/build-netifaces.yml
index 9d060ca06f..adbbc9aa17 100644
--- a/.github/workflows/build-netifaces.yml
+++ b/.github/workflows/build-netifaces.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netifaces-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netifaces2.yml b/.github/workflows/build-netifaces2.yml
index 1ac5d27160..bd7114a85a 100644
--- a/.github/workflows/build-netifaces2.yml
+++ b/.github/workflows/build-netifaces2.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netifaces2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-newrelic.yml b/.github/workflows/build-newrelic.yml
index d947bf8c5f..cab91c4f23 100644
--- a/.github/workflows/build-newrelic.yml
+++ b/.github/workflows/build-newrelic.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: newrelic-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-nlopt.yml b/.github/workflows/build-nlopt.yml
index 22e3880e16..6b65a9a7d1 100644
--- a/.github/workflows/build-nlopt.yml
+++ b/.github/workflows/build-nlopt.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: nlopt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-nodejs-wheel-binaries.yml b/.github/workflows/build-nodejs-wheel-binaries.yml
index 5373315ad6..440d4d359a 100644
--- a/.github/workflows/build-nodejs-wheel-binaries.yml
+++ b/.github/workflows/build-nodejs-wheel-binaries.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: nodejs-wheel-binaries-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numcodecs.yml b/.github/workflows/build-numcodecs.yml
index fa3dd35ccb..40b22a3ead 100644
--- a/.github/workflows/build-numcodecs.yml
+++ b/.github/workflows/build-numcodecs.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numcodecs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numexpr.yml b/.github/workflows/build-numexpr.yml
index b5b1612da8..eec1029ae0 100644
--- a/.github/workflows/build-numexpr.yml
+++ b/.github/workflows/build-numexpr.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numexpr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy-minmax.yml b/.github/workflows/build-numpy-minmax.yml
index 49029a9344..3326245a14 100644
--- a/.github/workflows/build-numpy-minmax.yml
+++ b/.github/workflows/build-numpy-minmax.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-minmax-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy-quaternion.yml b/.github/workflows/build-numpy-quaternion.yml
index 241f481476..0e6d9bd7e2 100644
--- a/.github/workflows/build-numpy-quaternion.yml
+++ b/.github/workflows/build-numpy-quaternion.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-quaternion-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy-rms.yml b/.github/workflows/build-numpy-rms.yml
index 4bb610eced..e4d487ac65 100644
--- a/.github/workflows/build-numpy-rms.yml
+++ b/.github/workflows/build-numpy-rms.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-rms-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy.yml b/.github/workflows/build-numpy.yml
index 8082fc6a86..97801b626d 100644
--- a/.github/workflows/build-numpy.yml
+++ b/.github/workflows/build-numpy.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-obstore.yml b/.github/workflows/build-obstore.yml
index f68cf7e077..994952b57b 100644
--- a/.github/workflows/build-obstore.yml
+++ b/.github/workflows/build-obstore.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: obstore-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-onigurumacffi.yml b/.github/workflows/build-onigurumacffi.yml
index 365ab7ff51..c161ee9412 100644
--- a/.github/workflows/build-onigurumacffi.yml
+++ b/.github/workflows/build-onigurumacffi.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: onigurumacffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-onnx.yml b/.github/workflows/build-onnx.yml
index 9407da8b50..c0bc715a88 100644
--- a/.github/workflows/build-onnx.yml
+++ b/.github/workflows/build-onnx.yml
@@ -158,5 +158,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: onnx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-onnxruntime.yml b/.github/workflows/build-onnxruntime.yml
index 9a5f35742e..54f9a21227 100644
--- a/.github/workflows/build-onnxruntime.yml
+++ b/.github/workflows/build-onnxruntime.yml
@@ -191,5 +191,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: onnxruntime-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencc.yml b/.github/workflows/build-opencc.yml
index ce72fc7e01..9206e34676 100644
--- a/.github/workflows/build-opencc.yml
+++ b/.github/workflows/build-opencc.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencv-contrib-python.yml b/.github/workflows/build-opencv-contrib-python.yml
index b4a6881c61..b04b85ac05 100644
--- a/.github/workflows/build-opencv-contrib-python.yml
+++ b/.github/workflows/build-opencv-contrib-python.yml
@@ -158,5 +158,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencv-contrib-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencv-python-headless.yml b/.github/workflows/build-opencv-python-headless.yml
index 25fe05f3cb..466b32c87d 100644
--- a/.github/workflows/build-opencv-python-headless.yml
+++ b/.github/workflows/build-opencv-python-headless.yml
@@ -146,5 +146,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencv-python-headless-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencv-python.yml b/.github/workflows/build-opencv-python.yml
index dc5583320c..25715b11fb 100644
--- a/.github/workflows/build-opencv-python.yml
+++ b/.github/workflows/build-opencv-python.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencv-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-openexr.yml b/.github/workflows/build-openexr.yml
index 1191a6769a..39985c9a1e 100644
--- a/.github/workflows/build-openexr.yml
+++ b/.github/workflows/build-openexr.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: openexr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-openlineage-sql.yml b/.github/workflows/build-openlineage-sql.yml
index 22455b2d36..bae416a374 100644
--- a/.github/workflows/build-openlineage-sql.yml
+++ b/.github/workflows/build-openlineage-sql.yml
@@ -156,5 +156,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: openlineage-sql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opentimelineio.yml b/.github/workflows/build-opentimelineio.yml
index 7b98516976..5d22eae8dc 100644
--- a/.github/workflows/build-opentimelineio.yml
+++ b/.github/workflows/build-opentimelineio.yml
@@ -159,5 +159,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opentimelineio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opentsne.yml b/.github/workflows/build-opentsne.yml
index 87ff3f6187..4ffc0ff078 100644
--- a/.github/workflows/build-opentsne.yml
+++ b/.github/workflows/build-opentsne.yml
@@ -156,6 +156,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opentsne-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: opentsne-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-oracledb.yml b/.github/workflows/build-oracledb.yml
index 501b8ab6f0..008f203323 100644
--- a/.github/workflows/build-oracledb.yml
+++ b/.github/workflows/build-oracledb.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: oracledb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-orjson.yml b/.github/workflows/build-orjson.yml
index dba11f7884..dd31e4c070 100644
--- a/.github/workflows/build-orjson.yml
+++ b/.github/workflows/build-orjson.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: orjson-${{ matrix.version }}-*
diff --git a/.github/workflows/build-ormsgpack.yml b/.github/workflows/build-ormsgpack.yml
index 7a4ddb0304..3fabcbad0b 100644
--- a/.github/workflows/build-ormsgpack.yml
+++ b/.github/workflows/build-ormsgpack.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ormsgpack-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-osqp.yml b/.github/workflows/build-osqp.yml
index 01b1d62912..ccbd66462d 100644
--- a/.github/workflows/build-osqp.yml
+++ b/.github/workflows/build-osqp.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: osqp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pact-python-ffi.yml b/.github/workflows/build-pact-python-ffi.yml
index 4ddf1487cc..799a1b77f9 100644
--- a/.github/workflows/build-pact-python-ffi.yml
+++ b/.github/workflows/build-pact-python-ffi.yml
@@ -154,5 +154,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pact-python-ffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pagefind-bin.yml b/.github/workflows/build-pagefind-bin.yml
index cb058f1972..6f32179f9a 100644
--- a/.github/workflows/build-pagefind-bin.yml
+++ b/.github/workflows/build-pagefind-bin.yml
@@ -282,5 +282,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pagefind-bin-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pairmux.yml b/.github/workflows/build-pairmux.yml
index 1bea1cd24f..047fedebb1 100644
--- a/.github/workflows/build-pairmux.yml
+++ b/.github/workflows/build-pairmux.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pairmux-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pcodec.yml b/.github/workflows/build-pcodec.yml
index dc1913cf62..d097941900 100644
--- a/.github/workflows/build-pcodec.yml
+++ b/.github/workflows/build-pcodec.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pcodec-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-persistent.yml b/.github/workflows/build-persistent.yml
index 0e7372a7b2..fa4dd97e6f 100644
--- a/.github/workflows/build-persistent.yml
+++ b/.github/workflows/build-persistent.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: persistent-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pglast.yml b/.github/workflows/build-pglast.yml
index 662cd2b743..d5e2421391 100644
--- a/.github/workflows/build-pglast.yml
+++ b/.github/workflows/build-pglast.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pglast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-phik.yml b/.github/workflows/build-phik.yml
index 698ebfb48c..b1f8880d1f 100644
--- a/.github/workflows/build-phik.yml
+++ b/.github/workflows/build-phik.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: phik-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pi-heif.yml b/.github/workflows/build-pi-heif.yml
index 90c257d96f..cfb60bd0b2 100644
--- a/.github/workflows/build-pi-heif.yml
+++ b/.github/workflows/build-pi-heif.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pi_heif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pikepdf.yml b/.github/workflows/build-pikepdf.yml
index f71e09ba3a..c2a851638f 100644
--- a/.github/workflows/build-pikepdf.yml
+++ b/.github/workflows/build-pikepdf.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pikepdf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pillow-avif-plugin.yml b/.github/workflows/build-pillow-avif-plugin.yml
index 1a437223a2..1150e5cc1d 100644
--- a/.github/workflows/build-pillow-avif-plugin.yml
+++ b/.github/workflows/build-pillow-avif-plugin.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pillow-avif-plugin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pillow-heif.yml b/.github/workflows/build-pillow-heif.yml
index bc7d7eacee..3efece677c 100644
--- a/.github/workflows/build-pillow-heif.yml
+++ b/.github/workflows/build-pillow-heif.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pillow_heif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pillow.yml b/.github/workflows/build-pillow.yml
index acba45c6fd..dbc3e000a2 100644
--- a/.github/workflows/build-pillow.yml
+++ b/.github/workflows/build-pillow.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pillow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pinecone.yml b/.github/workflows/build-pinecone.yml
index 26b262d893..6dba33a2fb 100644
--- a/.github/workflows/build-pinecone.yml
+++ b/.github/workflows/build-pinecone.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pinecone-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pipdeptree.yml b/.github/workflows/build-pipdeptree.yml
index 255808b276..f5013d5f3f 100644
--- a/.github/workflows/build-pipdeptree.yml
+++ b/.github/workflows/build-pipdeptree.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pipdeptree-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pixelhog.yml b/.github/workflows/build-pixelhog.yml
index a3b7c9bb1b..68e903933d 100644
--- a/.github/workflows/build-pixelhog.yml
+++ b/.github/workflows/build-pixelhog.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pixelhog-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-plotext.yml b/.github/workflows/build-plotext.yml
index 7d30a31666..d62f9aae73 100644
--- a/.github/workflows/build-plotext.yml
+++ b/.github/workflows/build-plotext.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: plotext-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-plyvel.yml b/.github/workflows/build-plyvel.yml
index c1b913985d..1143b40897 100644
--- a/.github/workflows/build-plyvel.yml
+++ b/.github/workflows/build-plyvel.yml
@@ -150,5 +150,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: plyvel-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pmdarima.yml b/.github/workflows/build-pmdarima.yml
index c06969e40d..123170fd94 100644
--- a/.github/workflows/build-pmdarima.yml
+++ b/.github/workflows/build-pmdarima.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pmdarima-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-point-cloud-utils.yml b/.github/workflows/build-point-cloud-utils.yml
index 0756d25196..003ea9afb8 100644
--- a/.github/workflows/build-point-cloud-utils.yml
+++ b/.github/workflows/build-point-cloud-utils.yml
@@ -197,6 +197,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: point-cloud-utils-0.34.0-*-manylinux_riscv64
       gpl-sources-artifact: point-cloud-utils-0.34.0-gpl-sources
diff --git a/.github/workflows/build-polars-runtime.yml b/.github/workflows/build-polars-runtime.yml
index 29ce7c662a..44ff8d2593 100644
--- a/.github/workflows/build-polars-runtime.yml
+++ b/.github/workflows/build-polars-runtime.yml
@@ -217,6 +217,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/build-polyleven.yml b/.github/workflows/build-polyleven.yml
index 4fd2c0d2a0..2c4c387f9f 100644
--- a/.github/workflows/build-polyleven.yml
+++ b/.github/workflows/build-polyleven.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: polyleven-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-poselib.yml b/.github/workflows/build-poselib.yml
index 9398dfaa97..7bede9ddc5 100644
--- a/.github/workflows/build-poselib.yml
+++ b/.github/workflows/build-poselib.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: poselib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-posix-ipc.yml b/.github/workflows/build-posix-ipc.yml
index f5e1c63ae0..6c8bf126d7 100644
--- a/.github/workflows/build-posix-ipc.yml
+++ b/.github/workflows/build-posix-ipc.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: posix-ipc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pot.yml b/.github/workflows/build-pot.yml
index 76f4a86faf..0db739246f 100644
--- a/.github/workflows/build-pot.yml
+++ b/.github/workflows/build-pot.yml
@@ -174,6 +174,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pot-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pot-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pqcrypto.yml b/.github/workflows/build-pqcrypto.yml
index 8ba833356f..cb7895fed7 100644
--- a/.github/workflows/build-pqcrypto.yml
+++ b/.github/workflows/build-pqcrypto.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pqcrypto-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-praat-parselmouth.yml b/.github/workflows/build-praat-parselmouth.yml
index 441a8cb7e8..5c9e50cf3f 100644
--- a/.github/workflows/build-praat-parselmouth.yml
+++ b/.github/workflows/build-praat-parselmouth.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: praat-parselmouth-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-prek.yml b/.github/workflows/build-prek.yml
index a6f7fe9891..ed88a89f62 100644
--- a/.github/workflows/build-prek.yml
+++ b/.github/workflows/build-prek.yml
@@ -162,5 +162,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: prek-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-preshed.yml b/.github/workflows/build-preshed.yml
index e65ddc806a..4048f26aa2 100644
--- a/.github/workflows/build-preshed.yml
+++ b/.github/workflows/build-preshed.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: preshed-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-primer3-py.yml b/.github/workflows/build-primer3-py.yml
index 7cd20da8c3..3517881b93 100644
--- a/.github/workflows/build-primer3-py.yml
+++ b/.github/workflows/build-primer3-py.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: primer3-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-primp.yml b/.github/workflows/build-primp.yml
index 4de6464f07..003fd59262 100644
--- a/.github/workflows/build-primp.yml
+++ b/.github/workflows/build-primp.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: primp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-protobuf-py-ext.yml b/.github/workflows/build-protobuf-py-ext.yml
index 6e2371c2d9..698a5f4af7 100644
--- a/.github/workflows/build-protobuf-py-ext.yml
+++ b/.github/workflows/build-protobuf-py-ext.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: protobuf-py-ext-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-protobuf.yml b/.github/workflows/build-protobuf.yml
index c2f7cac1eb..19fa1b1e42 100644
--- a/.github/workflows/build-protobuf.yml
+++ b/.github/workflows/build-protobuf.yml
@@ -264,5 +264,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: protobuf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-protovalidate.yml b/.github/workflows/build-protovalidate.yml
index 77a89a06d8..d860f31d37 100644
--- a/.github/workflows/build-protovalidate.yml
+++ b/.github/workflows/build-protovalidate.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: protovalidate-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-psd-tools.yml b/.github/workflows/build-psd-tools.yml
index bf025f1eeb..b6d4a01dbb 100644
--- a/.github/workflows/build-psd-tools.yml
+++ b/.github/workflows/build-psd-tools.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: psd-tools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-psygnal.yml b/.github/workflows/build-psygnal.yml
index 27ec4c4ca9..60427bae08 100644
--- a/.github/workflows/build-psygnal.yml
+++ b/.github/workflows/build-psygnal.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: psygnal-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-bip39-bindings.yml b/.github/workflows/build-py-bip39-bindings.yml
index 83a25b84bb..ee348c434e 100644
--- a/.github/workflows/build-py-bip39-bindings.yml
+++ b/.github/workflows/build-py-bip39-bindings.yml
@@ -161,5 +161,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-bip39-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-ed25519-zebra-bindings.yml b/.github/workflows/build-py-ed25519-zebra-bindings.yml
index 5589b2854f..f4db704c7f 100644
--- a/.github/workflows/build-py-ed25519-zebra-bindings.yml
+++ b/.github/workflows/build-py-ed25519-zebra-bindings.yml
@@ -169,5 +169,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-ed25519-zebra-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-radix.yml b/.github/workflows/build-py-radix.yml
index 57a5bc508b..3ed16dc60e 100644
--- a/.github/workflows/build-py-radix.yml
+++ b/.github/workflows/build-py-radix.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-radix-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-py-rust-stemmers.yml b/.github/workflows/build-py-rust-stemmers.yml
index 9d1579ffe6..7366f8e619 100644
--- a/.github/workflows/build-py-rust-stemmers.yml
+++ b/.github/workflows/build-py-rust-stemmers.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py_rust_stemmers-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-spy.yml b/.github/workflows/build-py-spy.yml
index df840bb0a0..970a4f4849 100644
--- a/.github/workflows/build-py-spy.yml
+++ b/.github/workflows/build-py-spy.yml
@@ -184,5 +184,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-spy-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-py-sr25519-bindings.yml b/.github/workflows/build-py-sr25519-bindings.yml
index e5988b483b..b3008a4fa8 100644
--- a/.github/workflows/build-py-sr25519-bindings.yml
+++ b/.github/workflows/build-py-sr25519-bindings.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-sr25519-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyahocorasick.yml b/.github/workflows/build-pyahocorasick.yml
index d39bdf0aee..6d4abac824 100644
--- a/.github/workflows/build-pyahocorasick.yml
+++ b/.github/workflows/build-pyahocorasick.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyahocorasick-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyamg.yml b/.github/workflows/build-pyamg.yml
index fb291514c3..05f45adb42 100644
--- a/.github/workflows/build-pyamg.yml
+++ b/.github/workflows/build-pyamg.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyamg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyarrow.yml b/.github/workflows/build-pyarrow.yml
index 7ddc9ad8bf..43c0b62190 100644
--- a/.github/workflows/build-pyarrow.yml
+++ b/.github/workflows/build-pyarrow.yml
@@ -339,5 +339,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyarrow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pybcj.yml b/.github/workflows/build-pybcj.yml
index a38ed1ade9..e2c2fc3f36 100644
--- a/.github/workflows/build-pybcj.yml
+++ b/.github/workflows/build-pybcj.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pybcj-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pybigwig.yml b/.github/workflows/build-pybigwig.yml
index 4b7de6e103..aa43473de5 100644
--- a/.github/workflows/build-pybigwig.yml
+++ b/.github/workflows/build-pybigwig.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pybigwig-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycapnp.yml b/.github/workflows/build-pycapnp.yml
index b9deb22432..a920eed43f 100644
--- a/.github/workflows/build-pycapnp.yml
+++ b/.github/workflows/build-pycapnp.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycapnp-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pycares.yml b/.github/workflows/build-pycares.yml
index 38c2759330..1c80a7c022 100644
--- a/.github/workflows/build-pycares.yml
+++ b/.github/workflows/build-pycares.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycares-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycld2.yml b/.github/workflows/build-pycld2.yml
index 4eea1373e9..4480d14647 100644
--- a/.github/workflows/build-pycld2.yml
+++ b/.github/workflows/build-pycld2.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycld2-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyclipper.yml b/.github/workflows/build-pyclipper.yml
index f8de5bfc20..4a612f949e 100644
--- a/.github/workflows/build-pyclipper.yml
+++ b/.github/workflows/build-pyclipper.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyclipper-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycocotools.yml b/.github/workflows/build-pycocotools.yml
index 8fb8bcfe0e..080deff13a 100644
--- a/.github/workflows/build-pycocotools.yml
+++ b/.github/workflows/build-pycocotools.yml
@@ -172,5 +172,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycocotools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycrc32.yml b/.github/workflows/build-pycrc32.yml
index 523965918a..02ef7edf65 100644
--- a/.github/workflows/build-pycrc32.yml
+++ b/.github/workflows/build-pycrc32.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycrc32-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycrdt.yml b/.github/workflows/build-pycrdt.yml
index 03758c8807..3a9590c298 100644
--- a/.github/workflows/build-pycrdt.yml
+++ b/.github/workflows/build-pycrdt.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycrdt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycryptodome.yml b/.github/workflows/build-pycryptodome.yml
index de8380aebf..5968a3ef0a 100644
--- a/.github/workflows/build-pycryptodome.yml
+++ b/.github/workflows/build-pycryptodome.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycryptodome-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycryptodomex.yml b/.github/workflows/build-pycryptodomex.yml
index a925813c07..667a83258c 100644
--- a/.github/workflows/build-pycryptodomex.yml
+++ b/.github/workflows/build-pycryptodomex.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycryptodomex-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycurl.yml b/.github/workflows/build-pycurl.yml
index d79d6d7d1a..6aa8a892eb 100644
--- a/.github/workflows/build-pycurl.yml
+++ b/.github/workflows/build-pycurl.yml
@@ -236,6 +236,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycurl-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pycurl-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pydantic-monty-client.yml b/.github/workflows/build-pydantic-monty-client.yml
index 0cd9677278..a0cca9739d 100644
--- a/.github/workflows/build-pydantic-monty-client.yml
+++ b/.github/workflows/build-pydantic-monty-client.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pydantic-monty-client-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pydantic-monty-runtime.yml b/.github/workflows/build-pydantic-monty-runtime.yml
index 655a18f4a4..f32cbd1ac4 100644
--- a/.github/workflows/build-pydantic-monty-runtime.yml
+++ b/.github/workflows/build-pydantic-monty-runtime.yml
@@ -189,5 +189,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pydantic-monty-runtime-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pydevd.yml b/.github/workflows/build-pydevd.yml
index 54a4891a8b..66084537b7 100644
--- a/.github/workflows/build-pydevd.yml
+++ b/.github/workflows/build-pydevd.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pydevd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyedflib.yml b/.github/workflows/build-pyedflib.yml
index f05321afbb..fda8eba5ec 100644
--- a/.github/workflows/build-pyedflib.yml
+++ b/.github/workflows/build-pyedflib.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyedflib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyerfa.yml b/.github/workflows/build-pyerfa.yml
index 4ce189eb6e..83ef4280ff 100644
--- a/.github/workflows/build-pyerfa.yml
+++ b/.github/workflows/build-pyerfa.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyerfa-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyfarmhash.yml b/.github/workflows/build-pyfarmhash.yml
index 0b85deb911..6dc5c95a91 100644
--- a/.github/workflows/build-pyfarmhash.yml
+++ b/.github/workflows/build-pyfarmhash.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyfarmhash-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyfastx.yml b/.github/workflows/build-pyfastx.yml
index 2160609e05..e81fa1b5db 100644
--- a/.github/workflows/build-pyfastx.yml
+++ b/.github/workflows/build-pyfastx.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyfastx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyfaup-rs.yml b/.github/workflows/build-pyfaup-rs.yml
index 26bbd471f0..aeabdd3c38 100644
--- a/.github/workflows/build-pyfaup-rs.yml
+++ b/.github/workflows/build-pyfaup-rs.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyfaup-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pygame.yml b/.github/workflows/build-pygame.yml
index 06455a9bd3..8d6a3b1fc7 100644
--- a/.github/workflows/build-pygame.yml
+++ b/.github/workflows/build-pygame.yml
@@ -251,6 +251,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pygame-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pygame-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pygeohash.yml b/.github/workflows/build-pygeohash.yml
index 3c6129d448..a32760e002 100644
--- a/.github/workflows/build-pygeohash.yml
+++ b/.github/workflows/build-pygeohash.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pygeohash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyglm.yml b/.github/workflows/build-pyglm.yml
index b9a9462d1e..71ed7bbdb5 100644
--- a/.github/workflows/build-pyglm.yml
+++ b/.github/workflows/build-pyglm.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyglm-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pygraphviz.yml b/.github/workflows/build-pygraphviz.yml
index be5a422dd5..ea8f19abba 100644
--- a/.github/workflows/build-pygraphviz.yml
+++ b/.github/workflows/build-pygraphviz.yml
@@ -318,6 +318,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pygraphviz-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pygraphviz-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pyheck.yml b/.github/workflows/build-pyheck.yml
index 82fb613bea..51f1e5b83a 100644
--- a/.github/workflows/build-pyheck.yml
+++ b/.github/workflows/build-pyheck.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyheck-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyheif.yml b/.github/workflows/build-pyheif.yml
index a5782a283b..f17cd5d864 100644
--- a/.github/workflows/build-pyheif.yml
+++ b/.github/workflows/build-pyheif.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyheif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyiceberg-core.yml b/.github/workflows/build-pyiceberg-core.yml
index ea36c100bb..b01000c0b6 100644
--- a/.github/workflows/build-pyiceberg-core.yml
+++ b/.github/workflows/build-pyiceberg-core.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyiceberg-core-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyiceberg.yml b/.github/workflows/build-pyiceberg.yml
index d55949ffe6..22235e4823 100644
--- a/.github/workflows/build-pyiceberg.yml
+++ b/.github/workflows/build-pyiceberg.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyiceberg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyicu-binary.yml b/.github/workflows/build-pyicu-binary.yml
index 68bf8b43a4..044e332554 100644
--- a/.github/workflows/build-pyicu-binary.yml
+++ b/.github/workflows/build-pyicu-binary.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyicu-binary-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyinstaller.yml b/.github/workflows/build-pyinstaller.yml
index 838dcdb431..fad29992fa 100644
--- a/.github/workflows/build-pyinstaller.yml
+++ b/.github/workflows/build-pyinstaller.yml
@@ -234,5 +234,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyinstaller-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyinstrument.yml b/.github/workflows/build-pyinstrument.yml
index 9e569fcc67..062266c8fc 100644
--- a/.github/workflows/build-pyinstrument.yml
+++ b/.github/workflows/build-pyinstrument.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyinstrument-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyjls.yml b/.github/workflows/build-pyjls.yml
index f03789de73..a8e35f0930 100644
--- a/.github/workflows/build-pyjls.yml
+++ b/.github/workflows/build-pyjls.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyjls-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pykdtree.yml b/.github/workflows/build-pykdtree.yml
index c2294d6219..d3a11f60f8 100644
--- a/.github/workflows/build-pykdtree.yml
+++ b/.github/workflows/build-pykdtree.yml
@@ -153,6 +153,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pykdtree-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pykdtree-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pylance.yml b/.github/workflows/build-pylance.yml
index 633dd229ee..9b3ca2f437 100644
--- a/.github/workflows/build-pylance.yml
+++ b/.github/workflows/build-pylance.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylance-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylerc.yml b/.github/workflows/build-pylerc.yml
index 2d9d2ebea1..cab33e20b3 100644
--- a/.github/workflows/build-pylerc.yml
+++ b/.github/workflows/build-pylerc.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylerc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylibmc.yml b/.github/workflows/build-pylibmc.yml
index a2a3c818ac..2f3b7ad01c 100644
--- a/.github/workflows/build-pylibmc.yml
+++ b/.github/workflows/build-pylibmc.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylibmc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylibsrtp.yml b/.github/workflows/build-pylibsrtp.yml
index c4bd4af4ec..8362759298 100644
--- a/.github/workflows/build-pylibsrtp.yml
+++ b/.github/workflows/build-pylibsrtp.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylibsrtp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylsqpack.yml b/.github/workflows/build-pylsqpack.yml
index ef8bed7d41..db78a64d94 100644
--- a/.github/workflows/build-pylsqpack.yml
+++ b/.github/workflows/build-pylsqpack.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylsqpack-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylzss.yml b/.github/workflows/build-pylzss.yml
index e627206de0..9d8d7c0e00 100644
--- a/.github/workflows/build-pylzss.yml
+++ b/.github/workflows/build-pylzss.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylzss-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pymavlink.yml b/.github/workflows/build-pymavlink.yml
index 30df80f5f9..2ef543213b 100644
--- a/.github/workflows/build-pymavlink.yml
+++ b/.github/workflows/build-pymavlink.yml
@@ -181,5 +181,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymavlink-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymaxflow.yml b/.github/workflows/build-pymaxflow.yml
index 8f382c74a7..1814daf36a 100644
--- a/.github/workflows/build-pymaxflow.yml
+++ b/.github/workflows/build-pymaxflow.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymaxflow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymcubes.yml b/.github/workflows/build-pymcubes.yml
index a2ff30801b..2c1fb1a1b8 100644
--- a/.github/workflows/build-pymcubes.yml
+++ b/.github/workflows/build-pymcubes.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymcubes-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymediainfo.yml b/.github/workflows/build-pymediainfo.yml
index 2136d5cb55..e56ff7aaa0 100644
--- a/.github/workflows/build-pymediainfo.yml
+++ b/.github/workflows/build-pymediainfo.yml
@@ -169,5 +169,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymediainfo-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pymongo.yml b/.github/workflows/build-pymongo.yml
index 989c13d369..db6bb53e96 100644
--- a/.github/workflows/build-pymongo.yml
+++ b/.github/workflows/build-pymongo.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymongo-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymongoarrow.yml b/.github/workflows/build-pymongoarrow.yml
index 067b12c59a..4e1db0abbd 100644
--- a/.github/workflows/build-pymongoarrow.yml
+++ b/.github/workflows/build-pymongoarrow.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymongoarrow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymongocrypt.yml b/.github/workflows/build-pymongocrypt.yml
index d320feec0a..e7f5dac1a6 100644
--- a/.github/workflows/build-pymongocrypt.yml
+++ b/.github/workflows/build-pymongocrypt.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymongocrypt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymonocypher.yml b/.github/workflows/build-pymonocypher.yml
index d434f234fc..a85751dd37 100644
--- a/.github/workflows/build-pymonocypher.yml
+++ b/.github/workflows/build-pymonocypher.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymonocypher-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymoo.yml b/.github/workflows/build-pymoo.yml
index 007e84f3c7..8828cb947d 100644
--- a/.github/workflows/build-pymoo.yml
+++ b/.github/workflows/build-pymoo.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymoo-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymssql.yml b/.github/workflows/build-pymssql.yml
index 73abb9c1fe..6e3084c9bb 100644
--- a/.github/workflows/build-pymssql.yml
+++ b/.github/workflows/build-pymssql.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymssql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymunk.yml b/.github/workflows/build-pymunk.yml
index f187cdbcb8..457bf50a6e 100644
--- a/.github/workflows/build-pymunk.yml
+++ b/.github/workflows/build-pymunk.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymunk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymupdf-layout.yml b/.github/workflows/build-pymupdf-layout.yml
index 6bbac17827..0b57b0f365 100644
--- a/.github/workflows/build-pymupdf-layout.yml
+++ b/.github/workflows/build-pymupdf-layout.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymupdf-layout-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymupdf.yml b/.github/workflows/build-pymupdf.yml
index 11c0be926e..1ee217657e 100644
--- a/.github/workflows/build-pymupdf.yml
+++ b/.github/workflows/build-pymupdf.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymupdf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymupdfb.yml b/.github/workflows/build-pymupdfb.yml
index 2de7421522..7e33870b66 100644
--- a/.github/workflows/build-pymupdfb.yml
+++ b/.github/workflows/build-pymupdfb.yml
@@ -137,5 +137,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymupdfb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pynng.yml b/.github/workflows/build-pynng.yml
index a2067b2542..3bf93339c3 100644
--- a/.github/workflows/build-pynng.yml
+++ b/.github/workflows/build-pynng.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pynng-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyodbc.yml b/.github/workflows/build-pyodbc.yml
index 5ed95651a4..294149743a 100644
--- a/.github/workflows/build-pyodbc.yml
+++ b/.github/workflows/build-pyodbc.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyodbc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyodps.yml b/.github/workflows/build-pyodps.yml
index 7e9b39dd44..86da9ee476 100644
--- a/.github/workflows/build-pyodps.yml
+++ b/.github/workflows/build-pyodps.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyodps-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyogrio.yml b/.github/workflows/build-pyogrio.yml
index 82988b7c0d..ec09086461 100644
--- a/.github/workflows/build-pyogrio.yml
+++ b/.github/workflows/build-pyogrio.yml
@@ -548,5 +548,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyogrio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyopengl-accelerate.yml b/.github/workflows/build-pyopengl-accelerate.yml
index ae10252bd0..53dd8fbc23 100644
--- a/.github/workflows/build-pyopengl-accelerate.yml
+++ b/.github/workflows/build-pyopengl-accelerate.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyopengl-accelerate-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyorc.yml b/.github/workflows/build-pyorc.yml
index 0464e5094f..a0a767c7ee 100644
--- a/.github/workflows/build-pyorc.yml
+++ b/.github/workflows/build-pyorc.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyorc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyoxipng.yml b/.github/workflows/build-pyoxipng.yml
index 50f2df0ebb..a26d96a9da 100644
--- a/.github/workflows/build-pyoxipng.yml
+++ b/.github/workflows/build-pyoxipng.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyoxipng-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pypolyline.yml b/.github/workflows/build-pypolyline.yml
index b430499e45..d96f7f0552 100644
--- a/.github/workflows/build-pypolyline.yml
+++ b/.github/workflows/build-pypolyline.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pypolyline-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyppmd.yml b/.github/workflows/build-pyppmd.yml
index c5f27e587f..6361ffba1f 100644
--- a/.github/workflows/build-pyppmd.yml
+++ b/.github/workflows/build-pyppmd.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyppmd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyproj.yml b/.github/workflows/build-pyproj.yml
index a1653ba361..c4e311f57d 100644
--- a/.github/workflows/build-pyproj.yml
+++ b/.github/workflows/build-pyproj.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyproj-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyqt5-sip.yml b/.github/workflows/build-pyqt5-sip.yml
index d44ff70214..4c6fcffaaa 100644
--- a/.github/workflows/build-pyqt5-sip.yml
+++ b/.github/workflows/build-pyqt5-sip.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyqt5-sip-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyqt6-sip.yml b/.github/workflows/build-pyqt6-sip.yml
index 3110b82333..fc7863e551 100644
--- a/.github/workflows/build-pyqt6-sip.yml
+++ b/.github/workflows/build-pyqt6-sip.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyqt6-sip-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyqwest.yml b/.github/workflows/build-pyqwest.yml
index 580c9ab652..c4b1f46666 100644
--- a/.github/workflows/build-pyqwest.yml
+++ b/.github/workflows/build-pyqwest.yml
@@ -152,5 +152,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyqwest-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrage.yml b/.github/workflows/build-pyrage.yml
index 6e222a3f6d..06dcd0d115 100644
--- a/.github/workflows/build-pyrage.yml
+++ b/.github/workflows/build-pyrage.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrage-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyreadstat.yml b/.github/workflows/build-pyreadstat.yml
index d4a93d63c6..4a2dac785b 100644
--- a/.github/workflows/build-pyreadstat.yml
+++ b/.github/workflows/build-pyreadstat.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyreadstat-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrefly.yml b/.github/workflows/build-pyrefly.yml
index 5c3ff3cb65..c5202bf473 100644
--- a/.github/workflows/build-pyrefly.yml
+++ b/.github/workflows/build-pyrefly.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrefly-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pyroaring.yml b/.github/workflows/build-pyroaring.yml
index 8c9ac2e390..7e55819660 100644
--- a/.github/workflows/build-pyroaring.yml
+++ b/.github/workflows/build-pyroaring.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyroaring-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrodigal.yml b/.github/workflows/build-pyrodigal.yml
index 0aeb7b8226..dbb5a656c4 100644
--- a/.github/workflows/build-pyrodigal.yml
+++ b/.github/workflows/build-pyrodigal.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrodigal-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyroscope-io.yml b/.github/workflows/build-pyroscope-io.yml
index 648981bc1e..ea08a1d6b7 100644
--- a/.github/workflows/build-pyroscope-io.yml
+++ b/.github/workflows/build-pyroscope-io.yml
@@ -294,5 +294,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyroscope_io-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrsistent.yml b/.github/workflows/build-pyrsistent.yml
index 2831f1d8d0..52ce1c1077 100644
--- a/.github/workflows/build-pyrsistent.yml
+++ b/.github/workflows/build-pyrsistent.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrsistent-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysam.yml b/.github/workflows/build-pysam.yml
index 0498086415..a7466ece80 100644
--- a/.github/workflows/build-pysam.yml
+++ b/.github/workflows/build-pysam.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysam-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysimdjson.yml b/.github/workflows/build-pysimdjson.yml
index b87d594934..2bae9eb190 100644
--- a/.github/workflows/build-pysimdjson.yml
+++ b/.github/workflows/build-pysimdjson.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysimdjson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyspeex-noise.yml b/.github/workflows/build-pyspeex-noise.yml
index 04d919fe01..912cdbb3e1 100644
--- a/.github/workflows/build-pyspeex-noise.yml
+++ b/.github/workflows/build-pyspeex-noise.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyspeex-noise-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysqlite3-binary.yml b/.github/workflows/build-pysqlite3-binary.yml
index 88987b5a80..3715d0861c 100644
--- a/.github/workflows/build-pysqlite3-binary.yml
+++ b/.github/workflows/build-pysqlite3-binary.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysqlite3-binary-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysqlite3.yml b/.github/workflows/build-pysqlite3.yml
index 5c97f3c181..61038fe36d 100644
--- a/.github/workflows/build-pysqlite3.yml
+++ b/.github/workflows/build-pysqlite3.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysqlite3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pystemmer.yml b/.github/workflows/build-pystemmer.yml
index d8bb4bec1c..bb93806ccb 100644
--- a/.github/workflows/build-pystemmer.yml
+++ b/.github/workflows/build-pystemmer.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pystemmer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyswisseph.yml b/.github/workflows/build-pyswisseph.yml
index cf56c6efe8..9f582913c8 100644
--- a/.github/workflows/build-pyswisseph.yml
+++ b/.github/workflows/build-pyswisseph.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyswisseph-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-python-bidi.yml b/.github/workflows/build-python-bidi.yml
index 0867e19aa4..47274eea6b 100644
--- a/.github/workflows/build-python-bidi.yml
+++ b/.github/workflows/build-python-bidi.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-bidi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-calamine.yml b/.github/workflows/build-python-calamine.yml
index 83d5db943c..b9387ff189 100644
--- a/.github/workflows/build-python-calamine.yml
+++ b/.github/workflows/build-python-calamine.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-calamine-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-crfsuite.yml b/.github/workflows/build-python-crfsuite.yml
index 6b219a2c03..22a937a360 100644
--- a/.github/workflows/build-python-crfsuite.yml
+++ b/.github/workflows/build-python-crfsuite.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-crfsuite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-fcl.yml b/.github/workflows/build-python-fcl.yml
index caa387ac73..226054dc24 100644
--- a/.github/workflows/build-python-fcl.yml
+++ b/.github/workflows/build-python-fcl.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-fcl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-geohash.yml b/.github/workflows/build-python-geohash.yml
index ea0037793f..0329babe9a 100644
--- a/.github/workflows/build-python-geohash.yml
+++ b/.github/workflows/build-python-geohash.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-geohash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-mecab-ko.yml b/.github/workflows/build-python-mecab-ko.yml
index 953d6cdee6..ae8fb38d64 100644
--- a/.github/workflows/build-python-mecab-ko.yml
+++ b/.github/workflows/build-python-mecab-ko.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-mecab-ko-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-rapidjson.yml b/.github/workflows/build-python-rapidjson.yml
index e5289eeb23..0632b18d84 100644
--- a/.github/workflows/build-python-rapidjson.yml
+++ b/.github/workflows/build-python-rapidjson.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python_rapidjson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-rtmidi.yml b/.github/workflows/build-python-rtmidi.yml
index 216a522ba0..1219dc8a6e 100644
--- a/.github/workflows/build-python-rtmidi.yml
+++ b/.github/workflows/build-python-rtmidi.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-rtmidi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pytokens.yml b/.github/workflows/build-pytokens.yml
index 095369b478..b54dc4c9a4 100644
--- a/.github/workflows/build-pytokens.yml
+++ b/.github/workflows/build-pytokens.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pytokens-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pytrec-eval-terrier.yml b/.github/workflows/build-pytrec-eval-terrier.yml
index 9f745363a5..0043553d34 100644
--- a/.github/workflows/build-pytrec-eval-terrier.yml
+++ b/.github/workflows/build-pytrec-eval-terrier.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pytrec-eval-terrier-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pywavelets.yml b/.github/workflows/build-pywavelets.yml
index 63392cd5f1..6142c420d6 100644
--- a/.github/workflows/build-pywavelets.yml
+++ b/.github/workflows/build-pywavelets.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pywavelets-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyxdameraulevenshtein.yml b/.github/workflows/build-pyxdameraulevenshtein.yml
index cd1a12547b..f8096312e1 100644
--- a/.github/workflows/build-pyxdameraulevenshtein.yml
+++ b/.github/workflows/build-pyxdameraulevenshtein.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyxdameraulevenshtein-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyxirr.yml b/.github/workflows/build-pyxirr.yml
index ae8a048c91..754db93b66 100644
--- a/.github/workflows/build-pyxirr.yml
+++ b/.github/workflows/build-pyxirr.yml
@@ -171,5 +171,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyxirr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyyaml-ft.yml b/.github/workflows/build-pyyaml-ft.yml
index 9647a47763..3d44254b8c 100644
--- a/.github/workflows/build-pyyaml-ft.yml
+++ b/.github/workflows/build-pyyaml-ft.yml
@@ -201,5 +201,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyyaml-ft-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-qdldl.yml b/.github/workflows/build-qdldl.yml
index c0ebe9a373..60e3ea35a5 100644
--- a/.github/workflows/build-qdldl.yml
+++ b/.github/workflows/build-qdldl.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: qdldl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-qoi.yml b/.github/workflows/build-qoi.yml
index 2128d3a57b..ad4095f016 100644
--- a/.github/workflows/build-qoi.yml
+++ b/.github/workflows/build-qoi.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: qoi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-quadprog.yml b/.github/workflows/build-quadprog.yml
index 4166bc1ff7..09117ba291 100644
--- a/.github/workflows/build-quadprog.yml
+++ b/.github/workflows/build-quadprog.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: quadprog-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-quickjs-ng.yml b/.github/workflows/build-quickjs-ng.yml
index 847dabd846..0277d4983e 100644
--- a/.github/workflows/build-quickjs-ng.yml
+++ b/.github/workflows/build-quickjs-ng.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: quickjs-ng-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-quickjs.yml b/.github/workflows/build-quickjs.yml
index 155d7316a0..25eda4ad6a 100644
--- a/.github/workflows/build-quickjs.yml
+++ b/.github/workflows/build-quickjs.yml
@@ -195,5 +195,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: quickjs-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-rapidyaml.yml b/.github/workflows/build-rapidyaml.yml
index 3ca1ec32b2..cb17a2f894 100644
--- a/.github/workflows/build-rapidyaml.yml
+++ b/.github/workflows/build-rapidyaml.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rapidyaml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rasterio.yml b/.github/workflows/build-rasterio.yml
index b27ba48f28..1c83596a69 100644
--- a/.github/workflows/build-rasterio.yml
+++ b/.github/workflows/build-rasterio.yml
@@ -573,5 +573,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rasterio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ray.yml b/.github/workflows/build-ray.yml
index 44d7a90f09..a385455b75 100644
--- a/.github/workflows/build-ray.yml
+++ b/.github/workflows/build-ray.yml
@@ -336,5 +336,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ray-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rbloom.yml b/.github/workflows/build-rbloom.yml
index ba89420a97..4017ff6ee1 100644
--- a/.github/workflows/build-rbloom.yml
+++ b/.github/workflows/build-rbloom.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rbloom-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rcssmin.yml b/.github/workflows/build-rcssmin.yml
index 00b3662024..73cd7cba7a 100644
--- a/.github/workflows/build-rcssmin.yml
+++ b/.github/workflows/build-rcssmin.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rcssmin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rdkit.yml b/.github/workflows/build-rdkit.yml
index ed6bd69585..5101c9ac26 100644
--- a/.github/workflows/build-rdkit.yml
+++ b/.github/workflows/build-rdkit.yml
@@ -239,5 +239,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rdkit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rectangle-packer.yml b/.github/workflows/build-rectangle-packer.yml
index 2963290dab..2a2fd829b0 100644
--- a/.github/workflows/build-rectangle-packer.yml
+++ b/.github/workflows/build-rectangle-packer.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rectangle-packer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-regress.yml b/.github/workflows/build-regress.yml
index c2bb98f092..aaa813c12d 100644
--- a/.github/workflows/build-regress.yml
+++ b/.github/workflows/build-regress.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: regress-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rensa.yml b/.github/workflows/build-rensa.yml
index 0b42a4bbf4..76d47864e7 100644
--- a/.github/workflows/build-rensa.yml
+++ b/.github/workflows/build-rensa.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rensa-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rerun-sdk.yml b/.github/workflows/build-rerun-sdk.yml
index 048647b390..2a9d1d5d57 100644
--- a/.github/workflows/build-rerun-sdk.yml
+++ b/.github/workflows/build-rerun-sdk.yml
@@ -268,5 +268,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rerun-sdk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-resiliparse.yml b/.github/workflows/build-resiliparse.yml
index 32270facf0..237ccccaae 100644
--- a/.github/workflows/build-resiliparse.yml
+++ b/.github/workflows/build-resiliparse.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: resiliparse-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-resvg-py.yml b/.github/workflows/build-resvg-py.yml
index cfb3be97f1..0dacf7ef3a 100644
--- a/.github/workflows/build-resvg-py.yml
+++ b/.github/workflows/build-resvg-py.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: resvg-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rfc3161-client.yml b/.github/workflows/build-rfc3161-client.yml
index f9a36dc787..0a4c12164d 100644
--- a/.github/workflows/build-rfc3161-client.yml
+++ b/.github/workflows/build-rfc3161-client.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rfc3161-client-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rhino3dm.yml b/.github/workflows/build-rhino3dm.yml
index d9c9aa5ff4..531973579c 100644
--- a/.github/workflows/build-rhino3dm.yml
+++ b/.github/workflows/build-rhino3dm.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rhino3dm-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rigour.yml b/.github/workflows/build-rigour.yml
index ee135298b8..40ead6d590 100644
--- a/.github/workflows/build-rigour.yml
+++ b/.github/workflows/build-rigour.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rigour-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ripgrep.yml b/.github/workflows/build-ripgrep.yml
index f2c4a589be..e9cbd9492d 100644
--- a/.github/workflows/build-ripgrep.yml
+++ b/.github/workflows/build-ripgrep.yml
@@ -221,5 +221,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ripgrep-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-rjieba.yml b/.github/workflows/build-rjieba.yml
index 29cf184da1..c72f4daf5a 100644
--- a/.github/workflows/build-rjieba.yml
+++ b/.github/workflows/build-rjieba.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rjieba-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rjsmin.yml b/.github/workflows/build-rjsmin.yml
index 55899e5c2a..3f67fc01a4 100644
--- a/.github/workflows/build-rjsmin.yml
+++ b/.github/workflows/build-rjsmin.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rjsmin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rocksdict.yml b/.github/workflows/build-rocksdict.yml
index c911e1035b..4769f2960d 100644
--- a/.github/workflows/build-rocksdict.yml
+++ b/.github/workflows/build-rocksdict.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rocksdict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rtoml.yml b/.github/workflows/build-rtoml.yml
index 66c19381c2..3a9ba42a85 100644
--- a/.github/workflows/build-rtoml.yml
+++ b/.github/workflows/build-rtoml.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rtoml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rtree.yml b/.github/workflows/build-rtree.yml
index e0260cede4..aada392815 100644
--- a/.github/workflows/build-rtree.yml
+++ b/.github/workflows/build-rtree.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rtree-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ruamel-yaml-clib.yml b/.github/workflows/build-ruamel-yaml-clib.yml
index 4013270a39..60f067e015 100644
--- a/.github/workflows/build-ruamel-yaml-clib.yml
+++ b/.github/workflows/build-ruamel-yaml-clib.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ruamel-yaml-clib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ruckig.yml b/.github/workflows/build-ruckig.yml
index 7f1d903933..12a2ca0ad0 100644
--- a/.github/workflows/build-ruckig.yml
+++ b/.github/workflows/build-ruckig.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ruckig-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-rumdl.yml b/.github/workflows/build-rumdl.yml
index a3e88d097c..b3a7414ee5 100644
--- a/.github/workflows/build-rumdl.yml
+++ b/.github/workflows/build-rumdl.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rumdl-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-runstats.yml b/.github/workflows/build-runstats.yml
index b0e5ad813b..f39507575b 100644
--- a/.github/workflows/build-runstats.yml
+++ b/.github/workflows/build-runstats.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: runstats-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ruptures.yml b/.github/workflows/build-ruptures.yml
index dbd1e2367c..0252523777 100644
--- a/.github/workflows/build-ruptures.yml
+++ b/.github/workflows/build-ruptures.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ruptures-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rustpy-xlsxwriter.yml b/.github/workflows/build-rustpy-xlsxwriter.yml
index f79fb28095..e49894a3c3 100644
--- a/.github/workflows/build-rustpy-xlsxwriter.yml
+++ b/.github/workflows/build-rustpy-xlsxwriter.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rustpy-xlsxwriter-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rustworkx.yml b/.github/workflows/build-rustworkx.yml
index 532e747b62..584f567a3b 100644
--- a/.github/workflows/build-rustworkx.yml
+++ b/.github/workflows/build-rustworkx.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rustworkx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-s5cmd.yml b/.github/workflows/build-s5cmd.yml
index 2f30294035..902836a194 100644
--- a/.github/workflows/build-s5cmd.yml
+++ b/.github/workflows/build-s5cmd.yml
@@ -225,5 +225,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: s5cmd-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-samplerate.yml b/.github/workflows/build-samplerate.yml
index 4db586deef..133700fef4 100644
--- a/.github/workflows/build-samplerate.yml
+++ b/.github/workflows/build-samplerate.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: samplerate-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-scikit-learn.yml b/.github/workflows/build-scikit-learn.yml
index 5ba6088084..751acebcd5 100644
--- a/.github/workflows/build-scikit-learn.yml
+++ b/.github/workflows/build-scikit-learn.yml
@@ -149,6 +149,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scikit-learn-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scikit-learn-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-scikit-misc.yml b/.github/workflows/build-scikit-misc.yml
index 3cd405f901..be059ba4bb 100644
--- a/.github/workflows/build-scikit-misc.yml
+++ b/.github/workflows/build-scikit-misc.yml
@@ -122,6 +122,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scikit-misc-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scikit-misc-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-scikit-network.yml b/.github/workflows/build-scikit-network.yml
index 74f80b52f9..6ca9953c19 100644
--- a/.github/workflows/build-scikit-network.yml
+++ b/.github/workflows/build-scikit-network.yml
@@ -140,6 +140,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scikit-network-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scikit-network-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-scipy.yml b/.github/workflows/build-scipy.yml
index 624e177009..fcc1fb3683 100644
--- a/.github/workflows/build-scipy.yml
+++ b/.github/workflows/build-scipy.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scipy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-scrypt.yml b/.github/workflows/build-scrypt.yml
index 36dca9faf1..b73e0ef881 100644
--- a/.github/workflows/build-scrypt.yml
+++ b/.github/workflows/build-scrypt.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scrypt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-scs.yml b/.github/workflows/build-scs.yml
index 90b0b3ed0a..4da5358f8a 100644
--- a/.github/workflows/build-scs.yml
+++ b/.github/workflows/build-scs.yml
@@ -163,6 +163,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scs-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scs-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-sdbus.yml b/.github/workflows/build-sdbus.yml
index 83f8583fc6..7b2996c969 100644
--- a/.github/workflows/build-sdbus.yml
+++ b/.github/workflows/build-sdbus.yml
@@ -320,6 +320,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sdbus-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: sdbus-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-segyio.yml b/.github/workflows/build-segyio.yml
index 3b0b0efd56..ae4be5dea6 100644
--- a/.github/workflows/build-segyio.yml
+++ b/.github/workflows/build-segyio.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: segyio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-selectolax.yml b/.github/workflows/build-selectolax.yml
index bf56486c54..99c4cb7407 100644
--- a/.github/workflows/build-selectolax.yml
+++ b/.github/workflows/build-selectolax.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: selectolax-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-semantic-text-splitter.yml b/.github/workflows/build-semantic-text-splitter.yml
index 5babb50618..e9013c3126 100644
--- a/.github/workflows/build-semantic-text-splitter.yml
+++ b/.github/workflows/build-semantic-text-splitter.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: semantic-text-splitter-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-semgrep.yml b/.github/workflows/build-semgrep.yml
index ea898cf203..a57742ce82 100644
--- a/.github/workflows/build-semgrep.yml
+++ b/.github/workflows/build-semgrep.yml
@@ -287,6 +287,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: semgrep-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: semgrep-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-sentencepiece.yml b/.github/workflows/build-sentencepiece.yml
index b4d1c49a9f..9cf754cb49 100644
--- a/.github/workflows/build-sentencepiece.yml
+++ b/.github/workflows/build-sentencepiece.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sentencepiece-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-serpyco-rs.yml b/.github/workflows/build-serpyco-rs.yml
index b815c36e91..58c1897073 100644
--- a/.github/workflows/build-serpyco-rs.yml
+++ b/.github/workflows/build-serpyco-rs.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: serpyco-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-shapely.yml b/.github/workflows/build-shapely.yml
index 74d8ef1188..ea56a1237d 100644
--- a/.github/workflows/build-shapely.yml
+++ b/.github/workflows/build-shapely.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: shapely-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-shellcheck-py.yml b/.github/workflows/build-shellcheck-py.yml
index a20a42d80a..01871a4bfa 100644
--- a/.github/workflows/build-shellcheck-py.yml
+++ b/.github/workflows/build-shellcheck-py.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: shellcheck-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sherpa-onnx.yml b/.github/workflows/build-sherpa-onnx.yml
index 3815abc0ef..d45b87bed2 100644
--- a/.github/workflows/build-sherpa-onnx.yml
+++ b/.github/workflows/build-sherpa-onnx.yml
@@ -168,5 +168,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sherpa-onnx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-shiboken6.yml b/.github/workflows/build-shiboken6.yml
index b45a04b317..9de285da2a 100644
--- a/.github/workflows/build-shiboken6.yml
+++ b/.github/workflows/build-shiboken6.yml
@@ -147,5 +147,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: shiboken6-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simplejpeg.yml b/.github/workflows/build-simplejpeg.yml
index a89529ca93..c4804f0f32 100644
--- a/.github/workflows/build-simplejpeg.yml
+++ b/.github/workflows/build-simplejpeg.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simplejpeg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simplejson.yml b/.github/workflows/build-simplejson.yml
index f251876e3f..9ec4887760 100644
--- a/.github/workflows/build-simplejson.yml
+++ b/.github/workflows/build-simplejson.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simplejson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simplification.yml b/.github/workflows/build-simplification.yml
index f3b647d456..ce6da191b7 100644
--- a/.github/workflows/build-simplification.yml
+++ b/.github/workflows/build-simplification.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simplification-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simsimd.yml b/.github/workflows/build-simsimd.yml
index d751e6de2c..05c2094578 100644
--- a/.github/workflows/build-simsimd.yml
+++ b/.github/workflows/build-simsimd.yml
@@ -133,6 +133,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simsimd-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: simsimd-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-siphash24.yml b/.github/workflows/build-siphash24.yml
index 8bda8f9043..00d82c82c9 100644
--- a/.github/workflows/build-siphash24.yml
+++ b/.github/workflows/build-siphash24.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: siphash24-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-siphashc.yml b/.github/workflows/build-siphashc.yml
index 605e03259a..c99d8b205f 100644
--- a/.github/workflows/build-siphashc.yml
+++ b/.github/workflows/build-siphashc.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: siphashc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-skia-python.yml b/.github/workflows/build-skia-python.yml
index b31ec02c29..ba4f0875c0 100644
--- a/.github/workflows/build-skia-python.yml
+++ b/.github/workflows/build-skia-python.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: skia-python-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-snowflake-connector-python.yml b/.github/workflows/build-snowflake-connector-python.yml
index ae217844ab..314baed6b9 100644
--- a/.github/workflows/build-snowflake-connector-python.yml
+++ b/.github/workflows/build-snowflake-connector-python.yml
@@ -180,5 +180,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: snowflake-connector-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-solders.yml b/.github/workflows/build-solders.yml
index f3ed901469..ed10036d14 100644
--- a/.github/workflows/build-solders.yml
+++ b/.github/workflows/build-solders.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: solders-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-soxr.yml b/.github/workflows/build-soxr.yml
index bbbba29f75..7b5fa8dbfc 100644
--- a/.github/workflows/build-soxr.yml
+++ b/.github/workflows/build-soxr.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: soxr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-spacy.yml b/.github/workflows/build-spacy.yml
index dbfee21876..1e2b4dcf2f 100644
--- a/.github/workflows/build-spacy.yml
+++ b/.github/workflows/build-spacy.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spacy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sparsediffpy.yml b/.github/workflows/build-sparsediffpy.yml
index 0ebd4cf486..3d2f667d6d 100644
--- a/.github/workflows/build-sparsediffpy.yml
+++ b/.github/workflows/build-sparsediffpy.yml
@@ -157,6 +157,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sparsediffpy-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: sparsediffpy-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-spglib.yml b/.github/workflows/build-spglib.yml
index 3f0963f3e4..66a55a080d 100644
--- a/.github/workflows/build-spglib.yml
+++ b/.github/workflows/build-spglib.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spglib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sphn.yml b/.github/workflows/build-sphn.yml
index c0b88a1a33..de16a8d8db 100644
--- a/.github/workflows/build-sphn.yml
+++ b/.github/workflows/build-sphn.yml
@@ -186,5 +186,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sphn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-spidev.yml b/.github/workflows/build-spidev.yml
index f09cd7a691..e1e7c724cf 100644
--- a/.github/workflows/build-spidev.yml
+++ b/.github/workflows/build-spidev.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spidev-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-spookyhash.yml b/.github/workflows/build-spookyhash.yml
index fe12a2e998..d5a20f3178 100644
--- a/.github/workflows/build-spookyhash.yml
+++ b/.github/workflows/build-spookyhash.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spookyhash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlalchemy.yml b/.github/workflows/build-sqlalchemy.yml
index 0109322441..652147509f 100644
--- a/.github/workflows/build-sqlalchemy.yml
+++ b/.github/workflows/build-sqlalchemy.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlalchemy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlean-py.yml b/.github/workflows/build-sqlean-py.yml
index edc74c6728..ff96dd15b2 100644
--- a/.github/workflows/build-sqlean-py.yml
+++ b/.github/workflows/build-sqlean-py.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlean-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlglotc.yml b/.github/workflows/build-sqlglotc.yml
index 126469e38f..591377646c 100644
--- a/.github/workflows/build-sqlglotc.yml
+++ b/.github/workflows/build-sqlglotc.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlglotc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlite-vec.yml b/.github/workflows/build-sqlite-vec.yml
index 27ea46adfe..7e1fd673e7 100644
--- a/.github/workflows/build-sqlite-vec.yml
+++ b/.github/workflows/build-sqlite-vec.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlite-vec-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqloxide.yml b/.github/workflows/build-sqloxide.yml
index ffb4cb512a..cc0f6cab5c 100644
--- a/.github/workflows/build-sqloxide.yml
+++ b/.github/workflows/build-sqloxide.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqloxide-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqruff.yml b/.github/workflows/build-sqruff.yml
index 27c28f1cf6..0cf42f5d55 100644
--- a/.github/workflows/build-sqruff.yml
+++ b/.github/workflows/build-sqruff.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqruff-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-srsly.yml b/.github/workflows/build-srsly.yml
index a42ce51120..b8641c7509 100644
--- a/.github/workflows/build-srsly.yml
+++ b/.github/workflows/build-srsly.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: srsly-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ssh2-python.yml b/.github/workflows/build-ssh2-python.yml
index 081c9358a2..f733c5efef 100644
--- a/.github/workflows/build-ssh2-python.yml
+++ b/.github/workflows/build-ssh2-python.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ssh2-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sspilib.yml b/.github/workflows/build-sspilib.yml
index aa90d4a113..27f3d43fe9 100644
--- a/.github/workflows/build-sspilib.yml
+++ b/.github/workflows/build-sspilib.yml
@@ -187,5 +187,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sspilib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-starlark-pyo3.yml b/.github/workflows/build-starlark-pyo3.yml
index 475a418687..96c20c0cd7 100644
--- a/.github/workflows/build-starlark-pyo3.yml
+++ b/.github/workflows/build-starlark-pyo3.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: starlark-pyo3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-statsforecast.yml b/.github/workflows/build-statsforecast.yml
index 08440131b5..aff3e1cb1b 100644
--- a/.github/workflows/build-statsforecast.yml
+++ b/.github/workflows/build-statsforecast.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: statsforecast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-statsig-python-core.yml b/.github/workflows/build-statsig-python-core.yml
index be63a6a5ef..f5cead0b37 100644
--- a/.github/workflows/build-statsig-python-core.yml
+++ b/.github/workflows/build-statsig-python-core.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: statsig_python_core-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-statsmodels.yml b/.github/workflows/build-statsmodels.yml
index 4a34640650..d46799a0bc 100644
--- a/.github/workflows/build-statsmodels.yml
+++ b/.github/workflows/build-statsmodels.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: statsmodels-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-stream-inflate.yml b/.github/workflows/build-stream-inflate.yml
index 61b3f9b77f..0123507120 100644
--- a/.github/workflows/build-stream-inflate.yml
+++ b/.github/workflows/build-stream-inflate.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: stream-inflate-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-stream-unzip.yml b/.github/workflows/build-stream-unzip.yml
index a02c9c6d1e..1d400de20c 100644
--- a/.github/workflows/build-stream-unzip.yml
+++ b/.github/workflows/build-stream-unzip.yml
@@ -185,5 +185,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: stream-unzip-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-streaming-form-data.yml b/.github/workflows/build-streaming-form-data.yml
index baa913dede..308bc1c83d 100644
--- a/.github/workflows/build-streaming-form-data.yml
+++ b/.github/workflows/build-streaming-form-data.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: streaming-form-data-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sudachipy.yml b/.github/workflows/build-sudachipy.yml
index 543e6f291c..d2455d309f 100644
--- a/.github/workflows/build-sudachipy.yml
+++ b/.github/workflows/build-sudachipy.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sudachipy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-swiglpk.yml b/.github/workflows/build-swiglpk.yml
index 6a724ae533..2ecd2bce10 100644
--- a/.github/workflows/build-swiglpk.yml
+++ b/.github/workflows/build-swiglpk.yml
@@ -196,6 +196,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: swiglpk-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: swiglpk-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-symengine.yml b/.github/workflows/build-symengine.yml
index 8c3443f945..1c950fa5d3 100644
--- a/.github/workflows/build-symengine.yml
+++ b/.github/workflows/build-symengine.yml
@@ -175,6 +175,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: symengine-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: symengine-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-symusic.yml b/.github/workflows/build-symusic.yml
index f4813bba40..b258f11399 100644
--- a/.github/workflows/build-symusic.yml
+++ b/.github/workflows/build-symusic.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: symusic-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sysv-ipc.yml b/.github/workflows/build-sysv-ipc.yml
index a19b6d95b8..5f9f548815 100644
--- a/.github/workflows/build-sysv-ipc.yml
+++ b/.github/workflows/build-sysv-ipc.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sysv-ipc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ta-lib.yml b/.github/workflows/build-ta-lib.yml
index ef4cc2a8cc..93bfa1e4bb 100644
--- a/.github/workflows/build-ta-lib.yml
+++ b/.github/workflows/build-ta-lib.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ta-lib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tables.yml b/.github/workflows/build-tables.yml
index 2d10b781a2..0c197a2c4e 100644
--- a/.github/workflows/build-tables.yml
+++ b/.github/workflows/build-tables.yml
@@ -215,5 +215,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tables-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tach.yml b/.github/workflows/build-tach.yml
index a190665fbe..5e5f203a75 100644
--- a/.github/workflows/build-tach.yml
+++ b/.github/workflows/build-tach.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tach-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tantivy.yml b/.github/workflows/build-tantivy.yml
index c332c822ac..7144eeaf0f 100644
--- a/.github/workflows/build-tantivy.yml
+++ b/.github/workflows/build-tantivy.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tantivy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-taplo.yml b/.github/workflows/build-taplo.yml
index 6d9fc08af1..b811da8588 100644
--- a/.github/workflows/build-taplo.yml
+++ b/.github/workflows/build-taplo.yml
@@ -208,5 +208,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: taplo-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-tbb.yml b/.github/workflows/build-tbb.yml
index 1cfbc01f7a..912dcd9b4e 100644
--- a/.github/workflows/build-tbb.yml
+++ b/.github/workflows/build-tbb.yml
@@ -140,5 +140,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tbb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tcmlib.yml b/.github/workflows/build-tcmlib.yml
index cd7102b048..d962bfaea8 100644
--- a/.github/workflows/build-tcmlib.yml
+++ b/.github/workflows/build-tcmlib.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tcmlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-temporalio.yml b/.github/workflows/build-temporalio.yml
index 08be291c96..05298fb1b2 100644
--- a/.github/workflows/build-temporalio.yml
+++ b/.github/workflows/build-temporalio.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: temporalio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tensor-grep.yml b/.github/workflows/build-tensor-grep.yml
index 35bf8e1935..b17e07fe41 100644
--- a/.github/workflows/build-tensor-grep.yml
+++ b/.github/workflows/build-tensor-grep.yml
@@ -162,5 +162,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tensor-grep-${{ matrix.version }}-cp311-abi3-manylinux_riscv64
diff --git a/.github/workflows/build-tensordict.yml b/.github/workflows/build-tensordict.yml
index 1955a3f589..18e879b8df 100644
--- a/.github/workflows/build-tensordict.yml
+++ b/.github/workflows/build-tensordict.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tensordict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tesserocr.yml b/.github/workflows/build-tesserocr.yml
index 6d0d515d05..e4340e0f9a 100644
--- a/.github/workflows/build-tesserocr.yml
+++ b/.github/workflows/build-tesserocr.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tesserocr-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-test-results-parser.yml b/.github/workflows/build-test-results-parser.yml
index b3632b52cc..8500d2afb9 100644
--- a/.github/workflows/build-test-results-parser.yml
+++ b/.github/workflows/build-test-results-parser.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: test-results-parser-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-text2num.yml b/.github/workflows/build-text2num.yml
index 1c7eb5647d..bc3ab14d64 100644
--- a/.github/workflows/build-text2num.yml
+++ b/.github/workflows/build-text2num.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: text2num-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-textual-speedups.yml b/.github/workflows/build-textual-speedups.yml
index 94a85ff34d..5bec1e9b12 100644
--- a/.github/workflows/build-textual-speedups.yml
+++ b/.github/workflows/build-textual-speedups.yml
@@ -230,5 +230,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: textual-speedups-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-texture2ddecoder.yml b/.github/workflows/build-texture2ddecoder.yml
index ea05156306..cfa3a4027a 100644
--- a/.github/workflows/build-texture2ddecoder.yml
+++ b/.github/workflows/build-texture2ddecoder.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: texture2ddecoder-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tgcrypto.yml b/.github/workflows/build-tgcrypto.yml
index 0b9badc268..84668e51f9 100644
--- a/.github/workflows/build-tgcrypto.yml
+++ b/.github/workflows/build-tgcrypto.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tgcrypto-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-thinc.yml b/.github/workflows/build-thinc.yml
index 6cb8d3d7d6..df656a3eee 100644
--- a/.github/workflows/build-thinc.yml
+++ b/.github/workflows/build-thinc.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: thinc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-thrift.yml b/.github/workflows/build-thrift.yml
index de25d195cf..12931ceee6 100644
--- a/.github/workflows/build-thrift.yml
+++ b/.github/workflows/build-thrift.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: thrift-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-thriftpy2.yml b/.github/workflows/build-thriftpy2.yml
index 196a77e849..a7c15af15f 100644
--- a/.github/workflows/build-thriftpy2.yml
+++ b/.github/workflows/build-thriftpy2.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: thriftpy2-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-tibs.yml b/.github/workflows/build-tibs.yml
index 03734bb3f8..7ca5de9255 100644
--- a/.github/workflows/build-tibs.yml
+++ b/.github/workflows/build-tibs.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tibs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tiktoken.yml b/.github/workflows/build-tiktoken.yml
index bee22b5057..dd756afefa 100644
--- a/.github/workflows/build-tiktoken.yml
+++ b/.github/workflows/build-tiktoken.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tiktoken-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tilelang.yml b/.github/workflows/build-tilelang.yml
index 8f287220ad..784a311eed 100644
--- a/.github/workflows/build-tilelang.yml
+++ b/.github/workflows/build-tilelang.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tilelang-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-time-machine.yml b/.github/workflows/build-time-machine.yml
index ccaa546a7c..15d58151f3 100644
--- a/.github/workflows/build-time-machine.yml
+++ b/.github/workflows/build-time-machine.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: time-machine-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-timezonefinder.yml b/.github/workflows/build-timezonefinder.yml
index 6d12f435c8..33ef4dd473 100644
--- a/.github/workflows/build-timezonefinder.yml
+++ b/.github/workflows/build-timezonefinder.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: timezonefinder-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tink.yml b/.github/workflows/build-tink.yml
index 6feecaf0c7..a9235ad379 100644
--- a/.github/workflows/build-tink.yml
+++ b/.github/workflows/build-tink.yml
@@ -289,5 +289,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tink-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tinyobjloader.yml b/.github/workflows/build-tinyobjloader.yml
index 009326c168..20a5e889d6 100644
--- a/.github/workflows/build-tinyobjloader.yml
+++ b/.github/workflows/build-tinyobjloader.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tinyobjloader-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tombi.yml b/.github/workflows/build-tombi.yml
index bf51d9c901..911eb82177 100644
--- a/.github/workflows/build-tombi.yml
+++ b/.github/workflows/build-tombi.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tombi-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-tomli.yml b/.github/workflows/build-tomli.yml
index cafb2d2061..02addc0f9e 100644
--- a/.github/workflows/build-tomli.yml
+++ b/.github/workflows/build-tomli.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tomli-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-toons.yml b/.github/workflows/build-toons.yml
index 8f74565bce..c23119a969 100644
--- a/.github/workflows/build-toons.yml
+++ b/.github/workflows/build-toons.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: toons-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-torch.yml b/.github/workflows/build-torch.yml
index 14c16bbb54..e31eaa512a 100644
--- a/.github/workflows/build-torch.yml
+++ b/.github/workflows/build-torch.yml
@@ -228,5 +228,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: torch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-torchaudio.yml b/.github/workflows/build-torchaudio.yml
index 16519505fe..4ee2afb00b 100644
--- a/.github/workflows/build-torchaudio.yml
+++ b/.github/workflows/build-torchaudio.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: torchaudio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tornado.yml b/.github/workflows/build-tornado.yml
index fa395f8c35..fd25f4863b 100644
--- a/.github/workflows/build-tornado.yml
+++ b/.github/workflows/build-tornado.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: artifacts-*
diff --git a/.github/workflows/build-traits.yml b/.github/workflows/build-traits.yml
index a7bb067640..50fe5c42e4 100644
--- a/.github/workflows/build-traits.yml
+++ b/.github/workflows/build-traits.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: traits-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-tree-sitter-bash.yml b/.github/workflows/build-tree-sitter-bash.yml
index 5adb3b8f3a..8088e87fa6 100644
--- a/.github/workflows/build-tree-sitter-bash.yml
+++ b/.github/workflows/build-tree-sitter-bash.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-bash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-c-sharp.yml b/.github/workflows/build-tree-sitter-c-sharp.yml
index bea5670a61..0703134548 100644
--- a/.github/workflows/build-tree-sitter-c-sharp.yml
+++ b/.github/workflows/build-tree-sitter-c-sharp.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-c-sharp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-c.yml b/.github/workflows/build-tree-sitter-c.yml
index aa9f71f679..ea516a1529 100644
--- a/.github/workflows/build-tree-sitter-c.yml
+++ b/.github/workflows/build-tree-sitter-c.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-c-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-cpp.yml b/.github/workflows/build-tree-sitter-cpp.yml
index 4afab9f2e1..94ae4bb59b 100644
--- a/.github/workflows/build-tree-sitter-cpp.yml
+++ b/.github/workflows/build-tree-sitter-cpp.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-cpp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-css.yml b/.github/workflows/build-tree-sitter-css.yml
index 71a155aef6..35b1962c17 100644
--- a/.github/workflows/build-tree-sitter-css.yml
+++ b/.github/workflows/build-tree-sitter-css.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-css-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-dart.yml b/.github/workflows/build-tree-sitter-dart.yml
index 4383d96b0a..8604bd0e90 100644
--- a/.github/workflows/build-tree-sitter-dart.yml
+++ b/.github/workflows/build-tree-sitter-dart.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-dart-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-dockerfile.yml b/.github/workflows/build-tree-sitter-dockerfile.yml
index 341ef41006..2614d0b5b0 100644
--- a/.github/workflows/build-tree-sitter-dockerfile.yml
+++ b/.github/workflows/build-tree-sitter-dockerfile.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-dockerfile-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-elixir.yml b/.github/workflows/build-tree-sitter-elixir.yml
index d9cc5dbb92..148d94dcd7 100644
--- a/.github/workflows/build-tree-sitter-elixir.yml
+++ b/.github/workflows/build-tree-sitter-elixir.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-elixir-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-embedded-template.yml b/.github/workflows/build-tree-sitter-embedded-template.yml
index 36723e0fd1..fc38586344 100644
--- a/.github/workflows/build-tree-sitter-embedded-template.yml
+++ b/.github/workflows/build-tree-sitter-embedded-template.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-embedded-template-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-fortran.yml b/.github/workflows/build-tree-sitter-fortran.yml
index 55b0e9efce..9ea5d54539 100644
--- a/.github/workflows/build-tree-sitter-fortran.yml
+++ b/.github/workflows/build-tree-sitter-fortran.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-fortran-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-go.yml b/.github/workflows/build-tree-sitter-go.yml
index a73928c678..026a6ee439 100644
--- a/.github/workflows/build-tree-sitter-go.yml
+++ b/.github/workflows/build-tree-sitter-go.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-go-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-groovy.yml b/.github/workflows/build-tree-sitter-groovy.yml
index 6d0c252b6c..37c84a50ee 100644
--- a/.github/workflows/build-tree-sitter-groovy.yml
+++ b/.github/workflows/build-tree-sitter-groovy.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-groovy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-hcl.yml b/.github/workflows/build-tree-sitter-hcl.yml
index cff521a5e0..86afe25b95 100644
--- a/.github/workflows/build-tree-sitter-hcl.yml
+++ b/.github/workflows/build-tree-sitter-hcl.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-hcl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-html.yml b/.github/workflows/build-tree-sitter-html.yml
index 6d8fae5d96..35fbb57fde 100644
--- a/.github/workflows/build-tree-sitter-html.yml
+++ b/.github/workflows/build-tree-sitter-html.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-html-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-java.yml b/.github/workflows/build-tree-sitter-java.yml
index fce18edf04..9e080c48eb 100644
--- a/.github/workflows/build-tree-sitter-java.yml
+++ b/.github/workflows/build-tree-sitter-java.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-java-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-javascript.yml b/.github/workflows/build-tree-sitter-javascript.yml
index 9a3cfe4fb3..d82d55bee7 100644
--- a/.github/workflows/build-tree-sitter-javascript.yml
+++ b/.github/workflows/build-tree-sitter-javascript.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-javascript-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-json.yml b/.github/workflows/build-tree-sitter-json.yml
index eda9a7fe68..7047e23eac 100644
--- a/.github/workflows/build-tree-sitter-json.yml
+++ b/.github/workflows/build-tree-sitter-json.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-json-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-julia.yml b/.github/workflows/build-tree-sitter-julia.yml
index e73fd8350f..78f0b73eae 100644
--- a/.github/workflows/build-tree-sitter-julia.yml
+++ b/.github/workflows/build-tree-sitter-julia.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-julia-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-kotlin.yml b/.github/workflows/build-tree-sitter-kotlin.yml
index 058f5bc78f..7ad5230da6 100644
--- a/.github/workflows/build-tree-sitter-kotlin.yml
+++ b/.github/workflows/build-tree-sitter-kotlin.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-kotlin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-language-pack.yml b/.github/workflows/build-tree-sitter-language-pack.yml
index 4ccba1ef12..3d29760b56 100644
--- a/.github/workflows/build-tree-sitter-language-pack.yml
+++ b/.github/workflows/build-tree-sitter-language-pack.yml
@@ -192,5 +192,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-language-pack-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-languages.yml b/.github/workflows/build-tree-sitter-languages.yml
index 68edce6373..4ee2aa9df4 100644
--- a/.github/workflows/build-tree-sitter-languages.yml
+++ b/.github/workflows/build-tree-sitter-languages.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-languages-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-lua.yml b/.github/workflows/build-tree-sitter-lua.yml
index ea749134b2..289e2f8f43 100644
--- a/.github/workflows/build-tree-sitter-lua.yml
+++ b/.github/workflows/build-tree-sitter-lua.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-lua-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-markdown.yml b/.github/workflows/build-tree-sitter-markdown.yml
index 6c4ffcac61..1dc305a472 100644
--- a/.github/workflows/build-tree-sitter-markdown.yml
+++ b/.github/workflows/build-tree-sitter-markdown.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-markdown-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-objc.yml b/.github/workflows/build-tree-sitter-objc.yml
index b8df98d227..d89d81ca58 100644
--- a/.github/workflows/build-tree-sitter-objc.yml
+++ b/.github/workflows/build-tree-sitter-objc.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-objc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-php.yml b/.github/workflows/build-tree-sitter-php.yml
index 7fd97d1351..f337e67ec1 100644
--- a/.github/workflows/build-tree-sitter-php.yml
+++ b/.github/workflows/build-tree-sitter-php.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-php-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-powershell.yml b/.github/workflows/build-tree-sitter-powershell.yml
index 566958144b..812ada21c1 100644
--- a/.github/workflows/build-tree-sitter-powershell.yml
+++ b/.github/workflows/build-tree-sitter-powershell.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-powershell-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-python.yml b/.github/workflows/build-tree-sitter-python.yml
index 699a528a07..634cf27223 100644
--- a/.github/workflows/build-tree-sitter-python.yml
+++ b/.github/workflows/build-tree-sitter-python.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-regex.yml b/.github/workflows/build-tree-sitter-regex.yml
index 10b1275d88..c672a9f376 100644
--- a/.github/workflows/build-tree-sitter-regex.yml
+++ b/.github/workflows/build-tree-sitter-regex.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-regex-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-ruby.yml b/.github/workflows/build-tree-sitter-ruby.yml
index 96cd8f050f..2560ae175a 100644
--- a/.github/workflows/build-tree-sitter-ruby.yml
+++ b/.github/workflows/build-tree-sitter-ruby.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-ruby-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-rust.yml b/.github/workflows/build-tree-sitter-rust.yml
index 640fe6412b..7a3227586e 100644
--- a/.github/workflows/build-tree-sitter-rust.yml
+++ b/.github/workflows/build-tree-sitter-rust.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-rust-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-scala.yml b/.github/workflows/build-tree-sitter-scala.yml
index d6c9f78fbc..dc5197c51a 100644
--- a/.github/workflows/build-tree-sitter-scala.yml
+++ b/.github/workflows/build-tree-sitter-scala.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-scala-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-sql.yml b/.github/workflows/build-tree-sitter-sql.yml
index 428a6c2968..789980b413 100644
--- a/.github/workflows/build-tree-sitter-sql.yml
+++ b/.github/workflows/build-tree-sitter-sql.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-sql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-swift.yml b/.github/workflows/build-tree-sitter-swift.yml
index 3697cde8af..f70f8c83be 100644
--- a/.github/workflows/build-tree-sitter-swift.yml
+++ b/.github/workflows/build-tree-sitter-swift.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-swift-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-toml.yml b/.github/workflows/build-tree-sitter-toml.yml
index d1360adec5..67314c1077 100644
--- a/.github/workflows/build-tree-sitter-toml.yml
+++ b/.github/workflows/build-tree-sitter-toml.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-toml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-typescript.yml b/.github/workflows/build-tree-sitter-typescript.yml
index 1648688c14..2cf838e020 100644
--- a/.github/workflows/build-tree-sitter-typescript.yml
+++ b/.github/workflows/build-tree-sitter-typescript.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-typescript-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-verilog.yml b/.github/workflows/build-tree-sitter-verilog.yml
index 0fb2efbc5f..016c2a386b 100644
--- a/.github/workflows/build-tree-sitter-verilog.yml
+++ b/.github/workflows/build-tree-sitter-verilog.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-verilog-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-xml.yml b/.github/workflows/build-tree-sitter-xml.yml
index 6715155036..a72ef69d1c 100644
--- a/.github/workflows/build-tree-sitter-xml.yml
+++ b/.github/workflows/build-tree-sitter-xml.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-xml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-yaml.yml b/.github/workflows/build-tree-sitter-yaml.yml
index 3b4a55a474..a0696ce9c2 100644
--- a/.github/workflows/build-tree-sitter-yaml.yml
+++ b/.github/workflows/build-tree-sitter-yaml.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-yaml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-zig.yml b/.github/workflows/build-tree-sitter-zig.yml
index d588ee0599..2765dc78c1 100644
--- a/.github/workflows/build-tree-sitter-zig.yml
+++ b/.github/workflows/build-tree-sitter-zig.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-zig-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-treelite.yml b/.github/workflows/build-treelite.yml
index aa6e7b373d..eb311adfca 100644
--- a/.github/workflows/build-treelite.yml
+++ b/.github/workflows/build-treelite.yml
@@ -146,6 +146,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: treelite-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: treelite-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-tsdownsample.yml b/.github/workflows/build-tsdownsample.yml
index 5c1c723ff3..9d63d5c938 100644
--- a/.github/workflows/build-tsdownsample.yml
+++ b/.github/workflows/build-tsdownsample.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tsdownsample-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tsv2py.yml b/.github/workflows/build-tsv2py.yml
index 9ed68b9284..71562043e4 100644
--- a/.github/workflows/build-tsv2py.yml
+++ b/.github/workflows/build-tsv2py.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tsv2py-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-typedunits.yml b/.github/workflows/build-typedunits.yml
index 9efa353ef4..490492afd9 100644
--- a/.github/workflows/build-typedunits.yml
+++ b/.github/workflows/build-typedunits.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typedunits-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-typeid-python.yml b/.github/workflows/build-typeid-python.yml
index 3b90905e39..4d0ac0ce87 100644
--- a/.github/workflows/build-typeid-python.yml
+++ b/.github/workflows/build-typeid-python.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typeid-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-typos.yml b/.github/workflows/build-typos.yml
index 61d1e7a2ae..33e20d40b3 100644
--- a/.github/workflows/build-typos.yml
+++ b/.github/workflows/build-typos.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typos-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-typst.yml b/.github/workflows/build-typst.yml
index 3b53f8774d..31f213e462 100644
--- a/.github/workflows/build-typst.yml
+++ b/.github/workflows/build-typst.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typst-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tzfpy.yml b/.github/workflows/build-tzfpy.yml
index 210ebad73f..de8b8a7eac 100644
--- a/.github/workflows/build-tzfpy.yml
+++ b/.github/workflows/build-tzfpy.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tzfpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ua-parser-rs.yml b/.github/workflows/build-ua-parser-rs.yml
index 3bef4fd039..df63d1cc84 100644
--- a/.github/workflows/build-ua-parser-rs.yml
+++ b/.github/workflows/build-ua-parser-rs.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ua_parser_rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-uamqp.yml b/.github/workflows/build-uamqp.yml
index d5e1da305a..4b38ced7da 100644
--- a/.github/workflows/build-uamqp.yml
+++ b/.github/workflows/build-uamqp.yml
@@ -150,5 +150,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: uamqp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-uharfbuzz.yml b/.github/workflows/build-uharfbuzz.yml
index cb3c65a46a..4730ef154a 100644
--- a/.github/workflows/build-uharfbuzz.yml
+++ b/.github/workflows/build-uharfbuzz.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: uharfbuzz-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ulid-transform.yml b/.github/workflows/build-ulid-transform.yml
index 29f2c1d071..d564bc9ba4 100644
--- a/.github/workflows/build-ulid-transform.yml
+++ b/.github/workflows/build-ulid-transform.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ulid-transform-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-unicode-segmentation-rs.yml b/.github/workflows/build-unicode-segmentation-rs.yml
index 3d6ae4a6e1..9d90790df7 100644
--- a/.github/workflows/build-unicode-segmentation-rs.yml
+++ b/.github/workflows/build-unicode-segmentation-rs.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: unicode-segmentation-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-unicodedata2.yml b/.github/workflows/build-unicodedata2.yml
index 9737287b25..858cf3903b 100644
--- a/.github/workflows/build-unicodedata2.yml
+++ b/.github/workflows/build-unicodedata2.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: unicodedata2-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-unicorn.yml b/.github/workflows/build-unicorn.yml
index 75f510f916..a5398d9069 100644
--- a/.github/workflows/build-unicorn.yml
+++ b/.github/workflows/build-unicorn.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: unicorn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-usearch.yml b/.github/workflows/build-usearch.yml
index c4f829e176..b69e822175 100644
--- a/.github/workflows/build-usearch.yml
+++ b/.github/workflows/build-usearch.yml
@@ -139,6 +139,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: usearch-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: usearch-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-uuid-utils.yml b/.github/workflows/build-uuid-utils.yml
index 4de7dbdbb5..2bcc59788f 100644
--- a/.github/workflows/build-uuid-utils.yml
+++ b/.github/workflows/build-uuid-utils.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: uuid-utils-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-valkey-glide.yml b/.github/workflows/build-valkey-glide.yml
index 566b76dc06..8760a34c4e 100644
--- a/.github/workflows/build-valkey-glide.yml
+++ b/.github/workflows/build-valkey-glide.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: valkey-glide-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vesin.yml b/.github/workflows/build-vesin.yml
index d8fa185457..c05db9e5a2 100644
--- a/.github/workflows/build-vesin.yml
+++ b/.github/workflows/build-vesin.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vesin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vhacdx.yml b/.github/workflows/build-vhacdx.yml
index ab833b14e6..9bf8b58876 100644
--- a/.github/workflows/build-vhacdx.yml
+++ b/.github/workflows/build-vhacdx.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vhacdx-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-vispy.yml b/.github/workflows/build-vispy.yml
index 1919171e7b..86ce05ef84 100644
--- a/.github/workflows/build-vispy.yml
+++ b/.github/workflows/build-vispy.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vispy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-viztracer.yml b/.github/workflows/build-viztracer.yml
index cdbe4bb9ca..85afec5f5d 100644
--- a/.github/workflows/build-viztracer.yml
+++ b/.github/workflows/build-viztracer.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: viztracer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vodozemac.yml b/.github/workflows/build-vodozemac.yml
index 19a89deed2..6e0da040d0 100644
--- a/.github/workflows/build-vodozemac.yml
+++ b/.github/workflows/build-vodozemac.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vodozemac-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vtk.yml b/.github/workflows/build-vtk.yml
index 09bd187219..9214701c1a 100644
--- a/.github/workflows/build-vtk.yml
+++ b/.github/workflows/build-vtk.yml
@@ -243,5 +243,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vtk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vtracer.yml b/.github/workflows/build-vtracer.yml
index 15a5062c27..63ad9459ae 100644
--- a/.github/workflows/build-vtracer.yml
+++ b/.github/workflows/build-vtracer.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vtracer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-wandb.yml b/.github/workflows/build-wandb.yml
index af0c6c86d7..c3f29736c9 100644
--- a/.github/workflows/build-wandb.yml
+++ b/.github/workflows/build-wandb.yml
@@ -162,5 +162,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: wandb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-webrtcvad-wheels.yml b/.github/workflows/build-webrtcvad-wheels.yml
index 53de725ac1..e42df4d305 100644
--- a/.github/workflows/build-webrtcvad-wheels.yml
+++ b/.github/workflows/build-webrtcvad-wheels.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: webrtcvad-wheels-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-wordcloud.yml b/.github/workflows/build-wordcloud.yml
index cf530c15b1..d0633686f3 100644
--- a/.github/workflows/build-wordcloud.yml
+++ b/.github/workflows/build-wordcloud.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: wordcloud-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xatlas.yml b/.github/workflows/build-xatlas.yml
index bf1f8b39ef..a35ac43f29 100644
--- a/.github/workflows/build-xatlas.yml
+++ b/.github/workflows/build-xatlas.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xatlas-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xattr.yml b/.github/workflows/build-xattr.yml
index e95bc7a3b7..5d5febef1b 100644
--- a/.github/workflows/build-xattr.yml
+++ b/.github/workflows/build-xattr.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xattr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xgboost-cpu.yml b/.github/workflows/build-xgboost-cpu.yml
index e8003df75e..bc46ec7ec7 100644
--- a/.github/workflows/build-xgboost-cpu.yml
+++ b/.github/workflows/build-xgboost-cpu.yml
@@ -161,6 +161,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xgboost-cpu-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: xgboost-cpu-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-xgboost.yml b/.github/workflows/build-xgboost.yml
index c7fcca3721..681e70e67e 100644
--- a/.github/workflows/build-xgboost.yml
+++ b/.github/workflows/build-xgboost.yml
@@ -164,6 +164,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xgboost-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: xgboost-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-xgrammar.yml b/.github/workflows/build-xgrammar.yml
index 544494953c..009e0ca8fd 100644
--- a/.github/workflows/build-xgrammar.yml
+++ b/.github/workflows/build-xgrammar.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xgrammar-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xmhuffman.yml b/.github/workflows/build-xmhuffman.yml
index 334bbe6fc9..7d69423017 100644
--- a/.github/workflows/build-xmhuffman.yml
+++ b/.github/workflows/build-xmhuffman.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xmhuffman-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xrootd.yml b/.github/workflows/build-xrootd.yml
index 68c4100a0a..424d1487ae 100644
--- a/.github/workflows/build-xrootd.yml
+++ b/.github/workflows/build-xrootd.yml
@@ -197,5 +197,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xrootd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-yappi.yml b/.github/workflows/build-yappi.yml
index 44b516e155..1a437415bd 100644
--- a/.github/workflows/build-yappi.yml
+++ b/.github/workflows/build-yappi.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yappi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-yara-python.yml b/.github/workflows/build-yara-python.yml
index 94d61b5cd7..eae308db78 100644
--- a/.github/workflows/build-yara-python.yml
+++ b/.github/workflows/build-yara-python.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yara-python-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-yara-x.yml b/.github/workflows/build-yara-x.yml
index e41f70f3d6..21c8305e8a 100644
--- a/.github/workflows/build-yara-x.yml
+++ b/.github/workflows/build-yara-x.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yara-x-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-yggdrasil-engine.yml b/.github/workflows/build-yggdrasil-engine.yml
index df09fcae92..f80133d701 100644
--- a/.github/workflows/build-yggdrasil-engine.yml
+++ b/.github/workflows/build-yggdrasil-engine.yml
@@ -190,5 +190,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yggdrasil-engine-${{ matrix.version }}-cp312-abi3-manylinux_riscv64
diff --git a/.github/workflows/build-zensical.yml b/.github/workflows/build-zensical.yml
index ab81723b91..b0ce985d66 100644
--- a/.github/workflows/build-zensical.yml
+++ b/.github/workflows/build-zensical.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zensical-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zeroconf.yml b/.github/workflows/build-zeroconf.yml
index 3c496fa15d..6e4518a4b4 100644
--- a/.github/workflows/build-zeroconf.yml
+++ b/.github/workflows/build-zeroconf.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zeroconf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zipcodes.yml b/.github/workflows/build-zipcodes.yml
index 1ebc72bb28..520e30c10c 100644
--- a/.github/workflows/build-zipcodes.yml
+++ b/.github/workflows/build-zipcodes.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zipcodes-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zipfile-deflate64.yml b/.github/workflows/build-zipfile-deflate64.yml
index 28adc429cc..8c5686a2c1 100644
--- a/.github/workflows/build-zipfile-deflate64.yml
+++ b/.github/workflows/build-zipfile-deflate64.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zipfile-deflate64-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zizmor.yml b/.github/workflows/build-zizmor.yml
index 87d984a50b..f005e15a4c 100644
--- a/.github/workflows/build-zizmor.yml
+++ b/.github/workflows/build-zizmor.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zizmor-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-zlib-ng.yml b/.github/workflows/build-zlib-ng.yml
index 55161f8008..bd1fa0362e 100644
--- a/.github/workflows/build-zlib-ng.yml
+++ b/.github/workflows/build-zlib-ng.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zlib-ng-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-zlib-state.yml b/.github/workflows/build-zlib-state.yml
index 71a5f85b05..31b67c3ed8 100644
--- a/.github/workflows/build-zlib-state.yml
+++ b/.github/workflows/build-zlib-state.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zlib-state-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-container.yml b/.github/workflows/build-zope-container.yml
index 3810e7ca28..c31d9216c0 100644
--- a/.github/workflows/build-zope-container.yml
+++ b/.github/workflows/build-zope-container.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-container-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-hookable.yml b/.github/workflows/build-zope-hookable.yml
index 76852d133e..85c4ea03b6 100644
--- a/.github/workflows/build-zope-hookable.yml
+++ b/.github/workflows/build-zope-hookable.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-hookable-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-i18nmessageid.yml b/.github/workflows/build-zope-i18nmessageid.yml
index dc2fb182dc..4f13ba64df 100644
--- a/.github/workflows/build-zope-i18nmessageid.yml
+++ b/.github/workflows/build-zope-i18nmessageid.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-i18nmessageid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-interface.yml b/.github/workflows/build-zope-interface.yml
index 871a64265d..d3be17ec7c 100644
--- a/.github/workflows/build-zope-interface.yml
+++ b/.github/workflows/build-zope-interface.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-interface-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-proxy.yml b/.github/workflows/build-zope-proxy.yml
index 9891f8e336..afff856c41 100644
--- a/.github/workflows/build-zope-proxy.yml
+++ b/.github/workflows/build-zope-proxy.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-proxy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-security.yml b/.github/workflows/build-zope-security.yml
index b70dffdd81..cd296c8503 100644
--- a/.github/workflows/build-zope-security.yml
+++ b/.github/workflows/build-zope-security.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-security-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zopfli.yml b/.github/workflows/build-zopfli.yml
index aa58fee5ef..4c3dfe28b5 100644
--- a/.github/workflows/build-zopfli.yml
+++ b/.github/workflows/build-zopfli.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zopfli-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zstandard.yml b/.github/workflows/build-zstandard.yml
index 614b98ad12..88186b5090 100644
--- a/.github/workflows/build-zstandard.yml
+++ b/.github/workflows/build-zstandard.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zstandard-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zstd.yml b/.github/workflows/build-zstd.yml
index bcf9884f74..1e87dc12d5 100644
--- a/.github/workflows/build-zstd.yml
+++ b/.github/workflows/build-zstd.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zstd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zuban.yml b/.github/workflows/build-zuban.yml
index 65fa70c03f..d819321603 100644
--- a/.github/workflows/build-zuban.yml
+++ b/.github/workflows/build-zuban.yml
@@ -174,5 +174,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zuban-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-zxing-cpp.yml b/.github/workflows/build-zxing-cpp.yml
index d53c278d51..7af2a54ad6 100644
--- a/.github/workflows/build-zxing-cpp.yml
+++ b/.github/workflows/build-zxing-cpp.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zxing-cpp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index b5ed98e576..3633ab3b73 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -25,9 +25,22 @@ jobs:
   check_versions:
     runs-on: ubuntu-latest
     steps:
+      # A branch pushed or a PR opened with GITHUB_TOKEN raises no events, so
+      # the per-package PRs would sit there with no checks at all. Push and open
+      # them as the App instead; without its credentials, or on a pull request
+      # (where a fork or Dependabot has none), the job still runs, it just falls
+      # back to the checkless GITHUB_TOKEN.
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        id: app-token
+        if: ${{ vars.RISEPROJECT_APP_CLIENT_ID != '' && github.event_name != 'pull_request' }}
+        with:
+          client-id: ${{ vars.RISEPROJECT_APP_CLIENT_ID }}
+          private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
+
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
 
       - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
         with:
@@ -37,7 +50,7 @@ jobs:
       # declared again per package, on that package's own branch, below.
       - name: Check versions
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
           SINCE: "2026-09-01"
         run: |
           uv run --with-requirements ci_scripts/requirements.txt python3 ci_scripts/check_versions.py \
@@ -49,14 +62,14 @@ jobs:
       - name: Open or update one PR per package
         if: github.event_name != 'pull_request'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
           REPORTS: ${{ runner.temp }}/reports
         run: |
           set -euo pipefail
 
           base=$(git rev-parse HEAD)
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          ci_scripts/git-identity.sh
 
           # Branch off main and re-declare this package alone, so the PR only
           # ever touches its own docs/packages/<pkg>.yaml (plus packages.txt and
diff --git a/ci_scripts/git-identity.sh b/ci_scripts/git-identity.sh
new file mode 100755
index 0000000000..c009ba4219
--- /dev/null
+++ b/ci_scripts/git-identity.sh
@@ -0,0 +1,21 @@
+#!/bin/sh
+# SPDX-FileCopyrightText: 2026 The RISE Project
+# SPDX-License-Identifier: MIT
+
+# Configure the identity the automation commits under: the GitHub App bot when
+# the workflow minted an App token (APP_SLUG set by create-github-app-token),
+# the Actions bot otherwise. The numeric account id in the address is what ties
+# a commit to that bot on GitHub, and only the API knows it.
+
+set -eu
+
+if [ -n "${APP_SLUG:-}" ]; then
+    name="${APP_SLUG}[bot]"
+    id=$(gh api "/users/${APP_SLUG}%5Bbot%5D" --jq '.id')
+else
+    name="github-actions[bot]"
+    id=41898282
+fi
+
+git config user.name "$name"
+git config user.email "${id}+${name}@users.noreply.github.com"
diff --git a/ci_scripts/update_doc.py b/ci_scripts/update_doc.py
index 08b7cebcff..62f5f750a0 100644
--- a/ci_scripts/update_doc.py
+++ b/ci_scripts/update_doc.py
@@ -37,6 +37,7 @@
 RELEASE_TAG = os.environ.get("RELEASE_TAG")
 GPL_SOURCES_DESCRIPTION = os.environ.get("GPL_SOURCES_DESCRIPTION", "").strip()
 DRY_RUN = os.environ.get("DRY_RUN", "false").strip().lower() == "true"
+GH_TOKEN = os.environ.get("GH_TOKEN", "")
 
 
 def find_wheel_files(path):
@@ -262,6 +263,21 @@ def git_run(*args, check=True):
     return subprocess.run(["git", *args], check=check)
 
 
+def push_remote():
+    """
+    Where to push the docs branch.
+
+    The checkout's own credentials are whatever the workflow gave it, and a
+    push made with GITHUB_TOKEN raises no events, so the documentation PR would
+    get no checks. Push over GH_TOKEN instead -- the App installation token
+    when the publish workflow minted one -- and fall back to the checkout's
+    remote when there is none. Actions masks the token in the logs.
+    """
+    if not GH_TOKEN:
+        return "origin"
+    return f"https://x-access-token:{GH_TOKEN}@github.com/{REPO}"
+
+
 def checkout_shared_branch(branch):
     """
     Check out the shared docs branch as a local worktree HEAD, based on
@@ -321,10 +337,7 @@ def pr_exists(branch):
 
 
 def configure_git_identity():
-    git_run("config", "user.name", "github-actions[bot]")
-    git_run(
-        "config", "user.email", "41898282+github-actions[bot]@users.noreply.github.com"
-    )
+    subprocess.run([CI_SCRIPTS_DIR / "git-identity.sh"], check=True)
 
 
 def extract_pr_url(stdout):
@@ -433,7 +446,7 @@ def compute_content():
 
     # The rebase rewrote whatever was on the branch, so the push is no longer a
     # fast-forward; the lease keeps it from clobbering a concurrent update.
-    push = ["push", "origin", f"HEAD:{branch}"]
+    push = ["push", push_remote(), f"HEAD:{branch}"]
     if remote_sha:
         push.insert(1, f"--force-with-lease={branch}:{remote_sha}")
     git_run(*push)
diff --git a/docs/workflows.md b/docs/workflows.md
index a10b3ff574..918fb50873 100644
--- a/docs/workflows.md
+++ b/docs/workflows.md
@@ -111,6 +111,30 @@ following workflows beyond those used for specific package builds:
    pending ones, or those matching the `version` glob of a
    `workflow_dispatch`).
 
+### The riseproject-dev App
+
+Branches pushed and pull requests opened with the default `GITHUB_TOKEN` raise
+no events, so nothing ever runs on them: the nightly upgrade PRs and the
+documentation PR would sit there with no checks. `nightly.yml` and
+`_publish-wheel.yml` therefore mint an installation token for the
+`riseproject-dev` GitHub App and commit as `riseproject-dev[bot]`. It needs the
+repository variable `RISEPROJECT_APP_CLIENT_ID` (the App's Client ID) and the
+repository secret `RISEPROJECT_APP_PRIVATE_KEY` (the App's private key, PEM
+included), and the App must be installed on this repository with read and write
+access to contents and pull requests, plus read access to issues. With the
+variable unset both fall back to `GITHUB_TOKEN` and the `github-actions[bot]`
+identity, checkless as before.
+
+`_publish-wheel.yml` is called by every `build-<package>.yml`, and a reusable
+workflow sees no secret it is not handed, so each caller passes the key on:
+
+```yaml
+  publish:
+    uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
+```
+
 ## The RISC-V Wheels Dashboard
 
 RISE makes use of the [RISC-V