ci: switch create-github-app-token to client-id

[BlackHole1]

actions/create-github-app-token 自 v3.1.0 起弃用 app-id 输入并改用 client-id，每次运行都会打印 "Input 'app-id' has been deprecated" 告警。本 PR 改为传组织级变量 OOMOL_DOWNLOADER_APP_CLIENT_ID（已配置，所有仓库可见），并把 @v2 升到 @v3，因为 client-id 输入只在 v3.1.0 之后存在。v3 的破坏性变更只有 node24 运行时（自托管 runner 需 v2.327.1 以上，GitHub 托管与 Blacksmith runner 均已满足）和需显式开启代理，这里都不受影响。

[coderabbitai]

Warning

Review limit reached

Next included review available in 56 minutes.

View limit details

Limit details: You’ve used all 2 included reviews currently available. Your 54 included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7f0e8962-1477-458d-8754-e1c22e51f96f

📥 Commits

Reviewing files that changed from the base of the PR and between 7898f63 and 257b699.

📒 Files selected for processing (2)

• .github/workflows/layer.yml
• .github/workflows/oocana-node.yml

---

_{Comment @coderabbitai help to get the list of available commands.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}