idk lets try this

.github/actions/expand-tokens/Dockerfile

@@ -0,0 +1,8 @@
+FROM mcr.microsoft.com/powershell
+WORKDIR /action
+
+RUN pwsh -c '$ProgressPreference = "SilentlyContinue"; Install-Module Axinom.DevOpsTooling -Scope AllUsers -AllowPrerelease -Force'
+
+COPY *.ps1 .
+
+ENTRYPOINT ["pwsh", "-c", "& /action/entrypoint.ps1"]

.github/actions/expand-tokens/action.yml

@@ -0,0 +1,14 @@
+name: 'Expand tokens'
+description: 'Replaces `__TOKENS__` with the values of equivalent environment variables in files.'
+inputs:
+  path:
+    description: 'Path to the file or directory to process.'
+    required: true
+  filenames:
+    description: 'Filename filter, used if path is a directory.'
+  recursive:
+    description: 'Whether to recursively search for files, used if path is a directory.'
+    default: false
+runs:
+  using: 'docker'
+  image: 'Dockerfile'

.github/actions/expand-tokens/entrypoint.ps1

@@ -0,0 +1,7 @@
+$ErrorActionPreference = "Stop"
+
+Import-Module Axinom.DevOpsTooling
+
+$path = Join-Path $env:GITHUB_WORKSPACE $env:INPUT_PATH
+
+Expand-Tokens -path $path -filenames $env:INPUT_FILENAMES -recursive:([bool]$env:INPUT_RECURSIVE)