A bug in apm-action v1.4.0 was overriding app-minted tokens with the workflow's default GITHUB_TOKEN.

Update to apm-action v1.4.1 to fix authentication per dependency via GitHub Apps.

Once fixed this scenario will work again:

dependencies:
  github-app:
    app-id: ${{ vars.APP_ID }}
    private-key: ${{ secrets.APP_PRIVATE_KEY }}
    owner: "SOME-ORG"
    repositories: ["*"]
  packages:
    - SOME-ORG/Some-Claude-Marketplace/plugins/essentials