refactor items

.changelog/pr-157.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+fix issue where stale tokens were not removed from keychain
+```

.github/workflows/code-analysis-lint-test.yaml

@@ -75,13 +75,16 @@ jobs:
         with:
           go-version-file: "go.mod"
           cache: true
+      - id: golangci-lint-version
+        run: >-
+          echo "version=$(go tool golangci-lint version --format short)" >> $GITHUB_OUTPUT
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v8
         with:
           # Require: The version of golangci-lint to use.
           # When `install-mode` is `binary` (default) the value can be v1.2 or v1.2.3 or `latest` to use the latest version.
           # When `install-mode` is `goinstall` the value can be v1.2.3, `latest`, or the hash of a commit.
-          version: latest
+          version: "${{ steps.golangci-lint-version.outputs.version }}"
 
           # Optional: working directory, useful for monorepos
           # working-directory: somedir