chore(ci): mitigate script injection attacks in generate-release (#2531)

See: https://docs.github.com/en/actions/concepts/security/script-injections

xref: https://github.com/ublue-os/aurora/issues/2528

.github/workflows/generate-release.yml

@@ -51,9 +51,12 @@ jobs:
 
       - name: Generate Release Text
         id: generate-release-text
+        env:
+          MATRIX_VERSION: "${{ matrix.version }}"
+          HANDWRITTEN: "${{ inputs.handwritten }}"
         shell: bash
         run: |
-          just changelogs "${{ matrix.version }}" "${{ inputs.handwritten }}"
+          just changelogs "${MATRIX_VERSION}" "${HANDWRITTEN}"
           source ./output.env
           echo "title=${TITLE}" >> $GITHUB_OUTPUT
           echo "tag=${TAG}" >> $GITHUB_OUTPUT