ci: add/update release workflow

Author: wetransformer

.github/workflows/tf-release.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Determine app token for release
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
         id: app-token
         with:
           app-id: ${{ secrets.WE_RELEASE_GITHUB_APP_ID }}