Bump the actions group with 2 updates (#7626)

Bumps the actions group with 2 updates: [actions/create-github-app-token](https://github.com/actions/create-github-app-token) and [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi).


Updates `actions/create-github-app-token` from 1 to 2
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v1...v2)

Updates `prefix-dev/setup-pixi` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/prefix-dev/setup-pixi/releases)
- [Commits](prefix-dev/setup-pixi@v0.8.3...v0.8.4)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: prefix-dev/setup-pixi
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/publish-changelog.yml

@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1
 
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
         id: app-token
         with:
           app-id: ${{ vars.APP_ID }}

.github/workflows/publish-release.yml

@@ -21,7 +21,7 @@ jobs:
     steps:
       - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1
 
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
         id: app-token
         with:
           app-id: ${{ vars.APP_ID }}

.github/workflows/upgrade-jupyterlab-dependencies.yml

@@ -79,7 +79,7 @@ jobs:
             jlpm
             jlpm deduplicate
           fi
-      - uses: prefix-dev/[email protected].3
+      - uses: prefix-dev/[email protected].4
         with:
           pixi-version: v0.41.4
           manifest-path: pyproject.toml