test: bump actions/create-github-app-token pin to exercise the self-heal reconcile companion

[joshua-temple]

Throwaway PR to exercise the self-heal reconcile companion (#438).

Bumps actions/create-github-app-token in .github/workflows/action-pins.yml (a hand-written source file) to a different real commit sha for the same action, without touching internal/generate/action_pins.yaml. The reconcile workflow should detect the drift, adopt the new sha into the governed manifest, regenerate, and push to this branch.

This PR will be closed once the companion behavior is verified.

[github-actions]

PR Validation checks failed

Workflow drift

The generated workflows are out of sync with the manifest. Run and commit:

cascade generate-workflow --config .github/manifest.yaml --force

cascade verify output

~ .github/workflows/orchestrate.yaml

1 file(s) drifted. Run `cascade generate-workflow` and commit the result.
Error: workflow drift detected
workflow drift detected

Job: Unit Tests

Failing step: Run unit tests

Annotations:

.github:6251 failure:  Process completed with exit code 123.

log excerpt

2026-07-06T08:59:02.8509412Z         	            	@@ -1 +1 @@
2026-07-06T08:59:02.8509808Z         	            	-v3.2.0
2026-07-06T08:59:02.8510178Z         	            	+v3.1.1
2026-07-06T08:59:02.8510712Z         	Test:       	TestDefaultActionPins_MatchesPriorHardcodedTable
2026-07-06T08:59:02.8511394Z         	Messages:   	shaVersion for actions/create-github-app-token
2026-07-06T08:59:02.8511960Z --- FAIL: TestDefaultActionPins_MatchesPriorHardcodedTable (0.00s)
2026-07-06T08:59:02.8512636Z === RUN   TestActionPinsManifest_EmitFlags
2026-07-06T08:59:02.8513041Z --- PASS: TestActionPinsManifest_EmitFlags (0.00s)
2026-07-06T08:59:02.8513451Z === RUN   TestActionRef_DefaultTagModeUnchanged
2026-07-06T08:59:02.8514110Z --- PASS: TestActionRef_DefaultTagModeUnchanged (0.00s)
2026-07-06T08:59:02.8514709Z === RUN   TestActionRef_ExplicitTagModeMatchesDefault
2026-07-06T08:59:02.8515198Z --- PASS: TestActionRef_ExplicitTagModeMatchesDefault (0.00s)
2026-07-06T08:59:02.8515700Z === RUN   TestActionRef_SHAModePinsEveryActionWithComment
2026-07-06T08:59:02.8516139Z --- PASS: TestActionRef_SHAModePinsEveryActionWithComment (0.00s)
2026-07-06T08:59:02.8516568Z === RUN   TestActionRef_ActionPinsOverrideRegardlessOfMode
2026-07-06T08:59:02.8516996Z --- PASS: TestActionRef_ActionPinsOverrideRegardlessOfMode (0.00s)
2026-07-06T08:59:02.8517576Z === RUN   TestActionRef_EmptyOverrideFallsThrough
2026-07-06T08:59:02.8517982Z --- PASS: TestActionRef_EmptyOverrideFallsThrough (0.00s)
2026-07-06T08:59:02.8518360Z === RUN   TestActionRef_UnknownActionPassthrough
2026-07-06T08:59:02.8518730Z --- PASS: TestActionRef_UnknownActionPassthrough (0.00s)
2026-07-06T08:59:02.8519082Z === RUN   TestActionRef_NilConfigSafe
2026-07-06T08:59:02.8519431Z --- PASS: TestActionRef_NilConfigSafe (0.00s)
2026-07-06T08:59:02.8519825Z === RUN   TestCLISetupRef_NilConfigSafe
2026-07-06T08:59:02.8520152Z --- PASS: TestCLISetupRef_NilConfigSafe (0.00s)
2026-07-06T08:59:02.8520467Z === RUN   TestCLISetupRef
2026-07-06T08:59:02.8520894Z === RUN   TestCLISetupRef/tag_default_when_cli_version_unset
2026-07-06T08:59:02.8521494Z === RUN   TestCLISetupRef/explicit_tag_in_tag_mode
2026-07-06T08:59:02.8522188Z === RUN   TestCLISetupRef/sha_mode_with_sha_set_emits_sha_and_version_comment
2026-07-06T08:59:02.8522970Z === RUN   TestCLISetupRef/sha_mode_without_sha_falls_back_to_tag
2026-07-06T08:59:02.8523888Z === RUN   TestCLISetupRef/tag_mode_ignores_a_set_sha
2026-07-06T08:59:02.8524785Z === RUN   TestCLISetupRef/beta_opts_into_master_regardless_of_pin_mode
2026-07-06T08:59:02.8525437Z --- PASS: TestCLISetupRef (0.00s)
2026-07-06T08:59:02.8526139Z     --- PASS: TestCLISetupRef/tag_default_when_cli_version_unset (0.00s)
2026-07-06T08:59:02.8526972Z     --- PASS: TestCLISetupRef/explicit_tag_in_tag_mode (0.00s)
2026-07-06T08:59:02.8527969Z     --- PASS: TestCLISetupRef/sha_mode_with_sha_set_emits_sha_and_version_comment (0.00s)
2026-07-06T08:59:02.8528965Z     --- PASS: TestCLISetupRef/sha_mode_without_sha_falls_back_to_tag (0.00s)
2026-07-06T08:59:02.8529811Z     --- PASS: TestCLISetupRef/tag_mode_ignores_a_set_sha (0.00s)
2026-07-06T08:59:02.8530729Z     --- PASS: TestCLISetupRef/beta_opts_into_master_regardless_of_pin_mode (0.00s)
2026-07-06T08:59:02.8531642Z === RUN   TestPinPolicy_E2E_SelfActionSHAPinned
2026-07-06T08:59:02.8532231Z --- PASS: TestPinPolicy_E2E_SelfActionSHAPinned (0.01s)
2026-07-06T08:59:02.8532870Z === RUN   TestPinPolicy_E2E_OrchestrateEmitsPinnedRefs
2026-07-06T08:59:02.8533552Z --- PASS: TestPinPolicy_E2E_OrchestrateEmitsPinnedRefs (0.02s)
2026-07-06T08:59:02.8534747Z === RUN   TestGetCLIRef_DefaultIsPinnedNotMutable
2026-07-06T08:59:02.8535361Z --- PASS: TestGetCLIRef_DefaultIsPinnedNotMutable (0.00s)
2026-07-06T08:59:02.8535937Z === RUN   TestPinPolicy_E2E_Deterministic
2026-07-06T08:59:02.8536447Z --- PASS: TestPinPolicy_E2E_Deterministic (0.01s)
2026-07-06T08:59:02.8537004Z === RUN   TestPinPolicy_E2E_TagModeDefaultUnchanged
2026-07-06T08:59:02.8537624Z --- PASS: TestPinPolicy_E2E_TagModeDefaultUnchanged (0.01s)
2026-07-06T08:59:02.8538280Z === RUN   TestActionRef_OverridePreservesVersionComment
2026-07-06T08:59:02.8538952Z --- PASS: TestActionRef_OverridePreservesVersionComment (0.00s)
2026-07-06T08:59:02.8540125Z === RUN   TestRenderLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:59:02.8540780Z === PAUSE TestRenderLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:59:02.8541449Z === RUN   TestGenerateLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:59:02.8542143Z === PAUSE TestGenerateLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:59:02.8543055Z === RUN   TestRenderLocalActions_AllowsDefaultActionFolder
2026-07-06T08:59:02.8543913Z === PAUSE TestRenderLocalActions_AllowsDefaultActionFolder
2026-07-06T08:59:02.8544527Z === RUN   TestReleaseGenerator_NoAppTokenByDefault
2026-07-06T08:59:02.8545128Z --- PASS: TestReleaseGenerator_NoAppTokenByDefault (0.00s)
2026-07-06T08:59:02.8545743Z === RUN   TestReleaseGenerator_ReleaseAppTokenMints
2026-07-06T08:59:02.8546380Z --- PASS: TestReleaseGenerator_ReleaseAppTokenMints (0.00s)

Full job log

Job: PR Gate

Failing step: Verify gated jobs succeeded or were skipped

Annotations:

.github:19 failure:  Process completed with exit code 1.

log excerpt

2026-07-06T08:59:24.8061331Z Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu24%2F20260628.225
2026-07-06T08:59:24.8063017Z ##[endgroup]
2026-07-06T08:59:24.8064667Z ##[group]GITHUB_TOKEN Permissions
2026-07-06T08:59:24.8068222Z Contents: read
2026-07-06T08:59:24.8069170Z Metadata: read
2026-07-06T08:59:24.8070193Z ##[endgroup]
2026-07-06T08:59:24.8073846Z Secret source: Actions
2026-07-06T08:59:24.8075231Z Prepare workflow directory
2026-07-06T08:59:24.8554220Z Prepare all required actions
2026-07-06T08:59:24.8692646Z Complete job name: PR Gate
2026-07-06T08:59:24.9866089Z ##[group]Run if [ "true" = "true" ]; then
2026-07-06T08:59:24.9867654Z �[36;1mif [ "true" = "true" ]; then�[0m
2026-07-06T08:59:24.9869234Z �[36;1m  echo "A required check failed or was cancelled."�[0m
2026-07-06T08:59:24.9870945Z �[36;1m  echo "  unit-tests:     failure"�[0m
2026-07-06T08:59:24.9872139Z �[36;1m  echo "  lint:           success"�[0m
2026-07-06T08:59:24.9873693Z �[36;1m  echo "  workflow-drift: failure"�[0m
2026-07-06T08:59:24.9875129Z �[36;1m  exit 1�[0m
2026-07-06T08:59:24.9876241Z �[36;1mfi�[0m
2026-07-06T08:59:24.9877465Z �[36;1mecho "PR Gate passed (jobs succeeded or were skipped)."�[0m
2026-07-06T08:59:24.9878959Z �[36;1mecho "  unit-tests:     failure"�[0m
2026-07-06T08:59:24.9880315Z �[36;1mecho "  lint:           success"�[0m
2026-07-06T08:59:24.9881955Z �[36;1mecho "  workflow-drift: failure"�[0m
2026-07-06T08:59:25.0485629Z shell: /usr/bin/bash -e {0}
2026-07-06T08:59:25.0487033Z ##[endgroup]
2026-07-06T08:59:25.0705207Z A required check failed or was cancelled.
2026-07-06T08:59:25.0706292Z   unit-tests:     failure
2026-07-06T08:59:25.0707191Z   lint:           success
2026-07-06T08:59:25.0708100Z   workflow-drift: failure
2026-07-06T08:59:25.0735027Z ##[error]Process completed with exit code 1.
2026-07-06T08:59:25.0882171Z Cleaning up orphan processes

Full job log