ci(actions): use client id and remove Trivy from Trunk

Switch the GitHub App token action to use SDK_RELEASE_GITHUB_CLIENT_ID via the recommended client-id input in the release and trunk upgrade workflows.

Remove Trivy from the Trunk linter set to match the other SDK repos and avoid the current Trivy bundle crash in the Trunk Check job.

Author: thomson-t

.github/workflows/release-draft.yml

@@ -53,7 +53,7 @@ jobs:
         id: generate-token
         uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
         with:
-          app-id: ${{ secrets.SDK_RELEASE_GITHUB_APP_ID }}
+          client-id: ${{ secrets.SDK_RELEASE_GITHUB_CLIENT_ID }}
           private-key: ${{ secrets.SDK_RELEASE_GITHUB_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
           repositories: |

.github/workflows/trunk-upgrade.yml

@@ -20,7 +20,7 @@ jobs:
         id: generate-token
         uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
         with:
-          app-id: ${{ secrets.SDK_RELEASE_GITHUB_APP_ID }} # trunk-ignore(actionlint/expression)
+          client-id: ${{ secrets.SDK_RELEASE_GITHUB_CLIENT_ID }} # trunk-ignore(actionlint/expression)
           private-key: ${{ secrets.SDK_RELEASE_GITHUB_APP_PRIVATE_KEY }} # trunk-ignore(actionlint/expression)
           owner: ${{ github.repository_owner }}
           repositories: |

.trunk/trunk.yaml

@@ -50,7 +50,6 @@ lint:
     - prettier@3.8.1
     - shellcheck@0.8.0
     - shfmt@3.6.0
-    - trivy@0.69.2
     - trufflehog@3.31.3
   disabled:
     - yamllint