Use separate GH token for changelog_generator job

[k0da]

Standard TOKEN used during release process often exceeds API limit and fails due to ratelimit. Rerunning job after timeout (60 minutes) passes though. We need a separate TOKEN for that.

[k0da]

Switched to CR_TOKEN, which is used only in helm publish job. This should improve situation.