feat: dogfood the published action on this repo, fix deploy token wiring (#13)

Dogfooding immediately surfaced a real gap: the deploy step pushes with
${GITHUB_TOKEN}, but the action never populated that variable — the
Quick Start example only works if the caller happens to export
GITHUB_TOKEN themselves. Add a github-token input defaulting to
github.token and wire it into the deploy step, so deploy-to-pages works
out of the box; callers can still pass a custom token.

Add .github/workflows/gitstats.yml: runs the published
shenxianpeng/gitstats-action@v1 (test.yml already covers the local
checkout) on every push to main plus a weekly refresh, deploying this
repository's own report to GitHub Pages.

README: top-row badge and the live-example badges now point at our own
deployed report; document the github-token input.


Claude-Session: https://claude.ai/code/session_01EXwAqUQfggpAAtSeHPQQxy

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: shenxianpeng

.github/workflows/gitstats.yml

@@ -0,0 +1,31 @@
+# Dogfooding: generate this repository's own gitstats report with the
+# published action and deploy it to GitHub Pages. This exercises the real
+# released v1 tag (not the local checkout, which test.yml already covers)
+# and keeps the badge in our README live.
+name: GitStats Report
+
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '0 3 * * 0' # weekly refresh
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  gitstats:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+
+      - uses: shenxianpeng/gitstats-action@v1
+        with:
+          deploy-to-pages: true
+        env:
+          # Redundant once v1 carries the github-token input default,
+          # but keeps the deploy working with any v1.x.
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

README.md

@@ -1,6 +1,6 @@
 # GitStats Action
 
-[![Test](https://github.com/shenxianpeng/gitstats-action/actions/workflows/test.yml/badge.svg)](https://github.com/shenxianpeng/gitstats-action/actions/workflows/test.yml) [![GitHub Marketplace](https://img.shields.io/badge/GitHub_Marketplace-gitstats--action-blue.svg)](https://github.com/marketplace/actions/gitstats-action)
+[![Test](https://github.com/shenxianpeng/gitstats-action/actions/workflows/test.yml/badge.svg)](https://github.com/shenxianpeng/gitstats-action/actions/workflows/test.yml) [![GitHub Marketplace](https://img.shields.io/badge/GitHub_Marketplace-gitstats--action-blue.svg)](https://github.com/marketplace/actions/gitstats-action) [![GitStats](https://shenxianpeng.github.io/gitstats-action/badge.svg)](https://shenxianpeng.github.io/gitstats-action/)
 
 A GitHub Action that generates insightful visual reports from Git repositories using [gitstats](https://github.com/shenxianpeng/gitstats).
 
@@ -42,9 +42,9 @@ That's it. One `uses` line, and your report is live on GitHub Pages.
 
 Every report ships with a `badge.svg` deployed right next to it — a shields.io-style badge in the gitstats brand colors showing your repository's **live commit count**. It updates automatically on every deploy.
 
-Live example, served from the [gitstats demo report](https://shenxianpeng.github.io/gitstats/) (click one):
+Live example — this repository eats its own dog food: the [gitstats.yml workflow](.github/workflows/gitstats.yml) runs this action on every push, and these badges are served from [our own deployed report](https://shenxianpeng.github.io/gitstats-action/) (click one):
 
-[![GitStats report](https://shenxianpeng.github.io/gitstats/badge.svg)](https://shenxianpeng.github.io/gitstats/) [![GitStats last commit](https://shenxianpeng.github.io/gitstats/badges/last-commit.svg)](https://shenxianpeng.github.io/gitstats/)
+[![GitStats report](https://shenxianpeng.github.io/gitstats-action/badge.svg)](https://shenxianpeng.github.io/gitstats-action/) [![GitStats last commit](https://shenxianpeng.github.io/gitstats-action/badges/last-commit.svg)](https://shenxianpeng.github.io/gitstats-action/)
 
 After the workflow runs, open the job summary: it contains ready-to-copy badge markdown for your repository. It looks like this:
 
@@ -81,6 +81,7 @@ For full shields.io URL-parameter customization (any color, `style=for-the-badge
 | `ai-model` | AI model (e.g. `gpt-4o`, `claude-sonnet-4-20250514`) | No | |
 | `deploy-to-pages` | Automatically deploy the report to GitHub Pages | No | `false` |
 | `deploy-branch` | Branch to deploy to (only used when `deploy-to-pages` is `true`) | No | `gh-pages` |
+| `github-token` | Token used to push the report to the deploy branch (only used when `deploy-to-pages` is `true`) | No | `${{ github.token }}` |
 
 ## Outputs
 

action.yml

@@ -41,6 +41,10 @@ inputs:
     description: 'Branch to deploy to (only used when deploy-to-pages is true)'
     required: false
     default: 'gh-pages'
+  github-token:
+    description: 'Token used to push the report to the deploy branch (only used when deploy-to-pages is true)'
+    required: false
+    default: ${{ github.token }}
 
 outputs:
   report_path:
@@ -122,6 +126,7 @@ runs:
       env:
         REPORT_PATH: ${{ steps.gitstats.outputs.report_path }}
         DEPLOY_BRANCH: ${{ inputs.deploy-branch }}
+        GITHUB_TOKEN: ${{ inputs.github-token }}
       run: |
         set -e
         cd "${REPORT_PATH}"