ci: use actions' token

GHA provides a token itself, we don't need to generate one.
This is more-fine grained, easier to change if needed, and more secure.

I think the existing `contents: read` is sufficient, but it might not be.
We'll see.

Author: lishaduck

.github/workflows/test.yml

@@ -94,3 +94,5 @@ jobs:
 
     - name: Run tests
       run: npm test
+      env:
+        AUTH_GITHUB: ${{ secrets.GITHUB_TOKEN }}

turbo.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://turbo.build/schema.json",
   "globalEnv": ["NO_COLOR", "LOCAL_ELM_REVIEW_SRC", "ELM_HOME"],
-  "globalPassThroughEnv": ["GITHUB_TOKEN", "AUTH_GITHUB"],
+  "globalPassThroughEnv": ["AUTH_GITHUB"],
   "tasks": {
     "elm-format": {
       "inputs": [