TokenNameForServiceAccount should select the first secret with the type kubernetes.io/service-account-token

[qingqueenking]

Simply returning the first one without checking its type is not robust.

argo-workflows/util/secrets/secret_name.go

Line 14 in 90a3252

return sa.Secrets[0].Name