Fix CI, again: borrow package-lock.json for github-release from elsewhere.

The copy of github-release we have was originally borrowed from Wizer's
CI setup; let's take its package-lock.json file too, to see if this
works. In contrast, on `main` right now we see this failure:

```
ERROR:  graphql_1.defaults is not a function
{}
TypeError: graphql_1.defaults is not a function
    at new GitHub
    (/action/node_modules/@actions/github/lib/github.js:23:34)
        at runOnce (/action/main.js:25:19)
            at run (/action/main.js:92:13)
```

Author: cfallin