recipe: note why the crates.io token is not passed through Bento
Declare the Bento release config in-repo