It looks like CI won't run when the last commit is made by github action bot. Context in https://github.com/orgs/community/discussions/50468#discussioncomment-5366823

The problem is that the push is done using the GITHUB_TOKEN, which won't create new workflow runs, so the required checks never happen for the automatically created commit. If you want the push to create new workflow runs, you need to use a PAT instead to authorized the push (generally the best way to do it is to pass it to actions/checkout using its token parameter).

To help with that I am testing using PAT and adding a base statement so as to not recursively call workflow.
Testing done in amishas157#1

Also, working with ops to set up a PAT secret in this repo.