Fix leaderboard workflow: rename secret to GIT_PAT, add schedule trigger, fix push permissions

[Copilot]

The leaderboard workflow was failing with Permission denied on push because it referenced a non-existent PAT_TOKEN secret (falling back to the limited github-actions[bot] token), and was triggered by push/PR/issue events instead of a daily schedule.

Changes

profile/scripts/updateReadme.js

• process.env.PAT_TOKEN → process.env.GIT_PAT

.github/workflows/update-readme.yml

• Triggers: replaced push/PR/issue/review events with schedule: cron: '0 0 * * *' + workflow_dispatch
• Permissions: added contents: write so the bot can push
• Secret: secrets.PAT_TOKEN → secrets.GIT_PAT throughout
• No-op handling: replaced git commit ... || echo "No changes" (which still ran git push) with a proper git diff --staged --quiet guard
• Push target: replaced hardcoded HEAD:main with HEAD:${{ github.event.repository.default_branch }}
• Loop prevention: added [skip ci] to the commit message
• Added npm install step scoped to profile/scripts

profile/scripts/package.json (new)

• Declares the scripts package with engines: { node: ">=20" } matching the workflow's setup-node version

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.