kit-registry: export GITHUB_TOKEN in sense/audit jobs

Authenticates GitHub release + GHSA polls so sense stops silently
returning zero findings under the 60/hr unauthenticated quota.
Clean patch on v4.2.3 (only change is +1 export line in .install-kit).