fix(ci): bump create-github-app-token to v0.3.1 to mask app tokens (#5529)