Use organization GitHub App token(s)

[ianlewis]

We should move to using GitHub App tokens owned by the slsa-framework org for this repo rather than using personal access tokens.

[ianlewis]

My PATs for this repo expired some time ago causing all the workflows not to work. I'm going to refresh them but it will likely cause an influx of issues to the slsa-github-generator repo.

[ianlewis]

Refreshed my PAT tokens so hopefully the workflows should start working again.

FYI @ramonpetgrave64

[ianlewis]

BTW @ramonpetgrave64 Do you have a npmjs.com account? We have a @slsa-framework org there with a number of test packages as well as an unscoped test package e2e-nodejs-tag-main-unscoped-slsa3. We should probably give you access and anyone else that makes sense.