Switched to using dev version of fledge due to better messaging

[aylapear]

The CRAN version of fledge does not pick up the titles of PR for their news file which as been our system and seems to work well, otherwise it uses the -/* notation and it doesn't seem people are in that habit.

Had to add pak install since not doing a CRAN version.

Choose to pin the version of fledge used, this means that it won't auto update but also means we know exactly that the current version is working and don't have to working about a changing breaking things.

Wasn't able to test fully but the plan would be to do a v2 version of these actions and test it on a select few before updating all the fledge actions that are in current use.

[aylapear]

@sebdalgarno since Joe is away and I am not sure when he will look at GitHub I figured I could get you to review for now and we can merge in he doesn't chime in within a week or so. Happy to explain the changes if you need as it took me a bit to understand how the system is designed and works.

[sebdalgarno]

apparently there is 60/hour limit on unauthenticated installs from public repos. If add GITHUB_PAT for dev installation with pak then would never fail
i.e.,

env:
          GITHUB_PAT: ${{ steps.app-token.outputs.token }}