github: New GitHub Actions OIDC token claims
GitHub Actions OIDC tokens now include a check_run_id claim, allowing workflows to present a run-specific identifier to external services. This change enables more fine-grained attribute-based access control and improved auditability for integrations.