Bump actions/create-github-app-token from 2 to 3

[dependabot]

Bumps actions/create-github-app-token from v2 to v3 in the add-to-inbox workflow.

• Runtime upgrade: v3 moves from Node.js 20 to Node.js 24, ahead of Node.js 20 EOL on GitHub Actions runners
• No input/output changes: app-id, private-key, owner, and outputs.token are all unchanged — this is a drop-in version bump

[changeset-bot]

⚠️ No Changeset found

Latest commit: fb88e64

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[llastflowers]

@copilot are the breaking changes ok here?

[Copilot]

@copilot are the breaking changes ok here?

Yes, the breaking changes are fine here. The v2→v3 bump is primarily a Node.js runtime upgrade (Node.js 20 → 24) to stay ahead of Node.js 20's EOL on GitHub Actions runners. There are no changes to the action's inputs or outputs — app-id, private-key, owner, and outputs.token all remain the same, which is exactly what this workflow uses.