Use built-in token where possible

[danielrbradley]

When working within a single repo we should use built-in tokens and not the full bot access token.

Applies to:

• Checking for new releases (https://github.com/pulumi/ci-mgmt/issues/963)
• Cleaning up release labels.

Related to #1053