revoke installation token after action run

todo.md

@@ -1,13 +1,20 @@
+## CURRENT
+
+[] look into trigger.yml without installation
+[] try to find heavy claude code user
+[] investigate including terminal output from bash commands as collapsed groups
+[] test initialization trade offs for pullfrog.yml
+
+## MAYBE
+
+[] investigate repo config file
+
+## DONE
+ 
 [x] add modes to prompt 
 [x] progressively update comment
 [x] don't allow rejecting prs
 [x] fix pnpm caching
 [x] fix prompt to avoid narration like "I just read all tools from MCP server"
 [x] avoid exposing env adding ## SECURITY prompt
-[] investigate including terminal output from bash commands as collapsed groups
-[] test initialization trade offs for pullfrog.yml
-[] try to find heavy claude code user
-[] investigate repo config file?
-[] look into trigger.yml without installation
-[] cancel installation token at the end of github aciton
- 
+[x] cancel installation token at the end of github aciton