Projects willing to keep the token alive after the end of the job can pass revoke: false as an input.

• BREAKING: replaces the installation_id and repository inputs with installation_retrieval_mode and installation_retrieval_payload to also support organization and user installation.
• switches to node20.
• adds a repositories input to scope the created token to a subset of repositories.
• revokes the created token at the end of the job with a post script.