mason: use scoped app token for Rust hermetic CI

Co-authored-by: Alfonso <alfonso-magic-context@users.noreply.github.com>