ci: switch create-github-app-token to client-id

[BlackHole1]

actions/create-github-app-token 自 v3.1.0 起弃用 app-id 输入并改用 client-id，每次运行都会打印 "Input 'app-id' has been deprecated" 告警。本 PR 改为传组织级变量 OOMOL_DOWNLOADER_APP_CLIENT_ID（已配置，所有仓库可见），行为不变。

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[coderabbitai]

Warning

Review limit reached

Next included review available in 55 minutes.

View limit details

Limit details: You’ve used all 2 included reviews currently available. Your 54 included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b4d2e8a5-138c-4421-8586-3ec89b37836e

📥 Commits

Reviewing files that changed from the base of the PR and between c1ae145 and f55e83a.

📒 Files selected for processing (2)

• .github/workflows/layer.yml
• .github/workflows/oocana-python.yml

---

_{Comment @coderabbitai help to get the list of available commands.}