build(deps): Bump the ci-cd group with 2 updates (#485)

Bumps the ci-cd group with 2 updates: [cpp-linter/cpp-linter-action](https://github.com/cpp-linter/cpp-linter-action) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `cpp-linter/cpp-linter-action` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/cpp-linter/cpp-linter-action/releases)
- [Commits](cpp-linter/cpp-linter-action@4f2a403...8e85cd0)

Updates `actions/create-github-app-token` from 2.2.2 to 3.2.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@fee1f7d...bcd2ba4)

---
updated-dependencies:
- dependency-name: cpp-linter/cpp-linter-action
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-cd
- dependency-name: actions/create-github-app-token
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-cd
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/cpp-linter.yml

@@ -35,7 +35,7 @@ jobs:
           version: 0.0.0-test+build # Doesn't matter, just need the compilation database
           skip-checkout: true
 
-      - uses: cpp-linter/cpp-linter-action@4f2a4033eda6119c3bf1a4d30857a4c61c11c247  # v2.19.0
+      - uses: cpp-linter/cpp-linter-action@8e85cd02c8c3fe3ae527c94b5683fe2366b144ed  # v2.20.0
         id: linter
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
       # triggers ci-build; the default GITHUB_TOKEN does not trigger downstream
       # workflows. Using an App (instead of a personal PAT) keeps the token
       # short-lived, least-privilege, and owned by the org rather than a person.
-      - uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349  # v2.2.2
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
         id: app-token
         with:
           app-id: ${{ secrets.RELEASE_APP_ID }}