fix: pin bot token setup to a commit hash

Author: gagik

.github/workflows/update-node-js.yaml

@@ -14,7 +14,7 @@ jobs:
     name: Update Node.js versions
     runs-on: ubuntu-latest
     steps:
-      - uses: mongodb-js/devtools-shared/actions/setup-bot-token@main
+      - uses: mongodb-js/devtools-shared/actions/setup-bot-token@d638357cabd624ae626d9abb62cbac2760aea932
         id: app-token
         with:
           app-id: ${{ vars.DEVTOOLS_BOT_APP_ID }}