I think it is a security risk that we have given precommit.ci a token with write access to the main repo.

If this works as expected we will get all the upsides of the current setup (see a report of precommit in CI) with none of the downsides (un-trusted entity has write permissions).