deps(ci): bump the github-actions group with 2 updates (#106)

Bumps the github-actions group with 2 updates: [actions/github-script](https://github.com/actions/github-script) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `actions/create-github-app-token` from 2 to 3
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v2...v3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/create-github-app-token
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francesco Pace <francesco.pace@gmail.com>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
     steps:
       - name: Detect if push commit belongs to merged PR
         id: detect
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             // Default: run CI unless we prove this is a merged-PR push to develop.

.github/workflows/cla.yml

@@ -31,7 +31,7 @@ jobs:
     steps:
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.CLA_APP_ID }}
           private-key: ${{ secrets.CLA_APP_PRIVATE_KEY }}
@@ -40,7 +40,7 @@ jobs:
         if: >-
           github.event_name == 'pull_request_target' ||
           (github.event_name == 'issue_comment' && github.event.issue.pull_request)
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ steps.app-token.outputs.token }}
           script: |