fix: use gh CLI for PR creation, bump Node to 22, add permissions

[pyramation]

Summary

Fixes the regenerate-ops.yml workflow that failed on first run due to a 403 push permission error.

Changes:

• Replace peter-evans/create-pull-request@v6 with gh pr create (matches the pattern used in constructive-db's schema-sdk-update.yml)
• Auth via GH_TOKEN: ${{ secrets.GH_SUBMODULE_PAT || github.token }} — uses PAT if available, falls back to built-in token
• Add top-level permissions: contents: write, pull-requests: write so the default token can push branches
• Bump Node from 20.x to 22.x (20 is deprecated on GitHub Actions runners)

Link to Devin session: https://app.devin.ai/sessions/409b3a5833884f2bbdfe98f3dbee192d
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring