Move app token generation to just before release steps

GitHub App installation tokens expire after 1 hour. Previously the token
was generated at the very start of the workflow, before three full kernel
builds. On a 2-core runner these builds can easily exceed 1 hour, causing
the token to expire before the release creation and asset upload steps.

Move the token generation step to immediately before the 'Create release'
step so the token is fresh when it is actually needed.

Author: cursoragent

.github/workflows/release.yaml

@@ -7,12 +7,6 @@ jobs:
     name: Release
     runs-on: ubuntu-22.04
     steps:
-     - name: Generate app token
-       id: app-token
-       uses: actions/create-github-app-token@v1
-       with:
-         app-id: ${{ secrets.ADMIN_APP_ID }}
-         private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }}
      - name: Code checkout
        uses: actions/checkout@v4
        with:
@@ -31,6 +25,12 @@ jobs:
        run: make ch_defconfig
      - name: Build kernel (x86-64)
        run: CFLAGS="-Wa,-mx86-used-note=no" make bzImage -j `nproc`
+     - name: Generate app token
+       id: app-token
+       uses: actions/create-github-app-token@v1
+       with:
+         app-id: ${{ secrets.ADMIN_APP_ID }}
+         private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }}
      - name: Create release
        id: create_release
        uses: actions/create-release@v1