readme updates (#12)

Signed-off-by: Brian DeHamer <bdehamer@github.com>

action.yml

@@ -3,11 +3,6 @@ description: 'Generate provenance attestations for build artifacts'
 author: 'GitHub'
 
 inputs:
-  github-token:
-    description: >
-      The GitHub token used to make authenticated API requests.
-    default: ${{ github.token }}
-    required: false
   subject-path:
     description: >
       Path to the artifact for which provenance will be generated. Must specify
@@ -31,6 +26,11 @@ inputs:
       and that the "subject-digest" parameter be specified. Defaults to false.
     default: false
     required: false
+  github-token:
+    description: >
+      The GitHub token used to make authenticated API requests.
+    default: ${{ github.token }}
+    required: false
 outputs:
   bundle-path:
     description: 'The path to the file containing the attestation bundle(s).'