## Summary of changes

Replaces our use of `actions/create-github-app-token` with `dd-octo-sts`

## Reason for change

It was recommended by sdlc-security that we make the shift

## Implementation details

They have a claude plugin to do it, so I poked the bot with a stick
until it did this. Looks OK to me best I can understand, and I'm
definitely happier having 🤖 write the various "patterns" 😅

## Test coverage

Unfortunately, no... this isn't an easy one to test. 

The AAS deploy is just one we will have to keep an eye on, as it's non
critical and we can temporarily revert if necessary.

The release one is more problematic - I left the "fallback"
`create_draft_release` workflow "as-is" for now, as we know it works,
and we want to make sure we have an escape hatch for the first run

## Other details

Requires DataDog/datadog-aas-extension#438 to be
merged first.