ci: Pin release workflow and declare IAM dependency directly

Pin the release workflow to a known action revision and use the dedicated release token, while declaring the IAM package as a direct dependency for consumers.

Author: moshloop

.github/workflows/release.yml

@@ -12,9 +12,9 @@ jobs:
       contents: write
       issues: write
       pull-requests: write
-    uses: flanksource/action-workflows/.github/workflows/create-release.yml@main
+    uses: flanksource/action-workflows/.github/workflows/create-release.yml@6e3308211f3e1694e187ea2057c24978e5a01c2f
     secrets:
-      token: ${{ secrets.GITHUB_TOKEN }}
+      token: ${{ secrets.FLANKBOT }}
   binary:
     runs-on: ubuntu-latest
     needs: create-release

go.mod

@@ -409,7 +409,7 @@ require (
 
 require (
 	cloud.google.com/go v0.123.0 // indirect
-	cloud.google.com/go/iam v1.7.0 // indirect
+	cloud.google.com/go/iam v1.7.0
 	cloud.google.com/go/storage v1.62.3 // indirect
 	github.com/DATA-DOG/go-sqlmock v1.5.2 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect