apply suggestion from doc review

Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>

Author: erik-krogh

javascript/ql/src/Security/CWE-094/ExpressionInjection.qhelp

@@ -8,10 +8,10 @@
 			code injection in contexts like <i>run:</i> or <i>script:</i>.
 		</p>
         <p>
-            Code injection in GitHub actions may allow an attacker to 
+            Code injection in GitHub Actions may allow an attacker to 
             exfiltrate the temporary GitHub repository authorization token. 
-            The token might have write access to the repository, and thus an attacker
-            might be able to use it to modify the repository.
+            The token might have write access to the repository, allowing an attacker
+             to use the token to make changes to the repository.
         </p>
 	</overview>