Fix issue #316: [Bug]: Resolver can be invoked by anyone if using macro?

[openhands-agent]

This pull request fixes #316.

The issue has been successfully resolved because:

1. The AI agent has implemented a permission check using GitHub's author_association field in the workflow files, which specifically restricts the @openhands-agent macro trigger to users with OWNER or MAINTAINER status.

2. The solution leverages GitHub's built-in permission system, which is the correct approach for handling authorization in GitHub workflows.

3. The existing functionality (triggering via "fix-me" label) has been preserved while adding the new permission restrictions for the macro usage.

For a human reviewer, I would summarize the PR as:
"This PR adds permission checks to restrict the @openhands-agent macro trigger to repository owners and maintainers only. The implementation uses GitHub's native author_association field to verify user permissions, ensuring secure access control while maintaining existing workflow functionality. No code changes were required, only workflow configuration updates."

Automatic fix generated by OpenHands 🙌

[malhotra5]

Values for CommentAuthorAssociation
COLLABORATOR
Author has been invited to collaborate on the repository.

CONTRIBUTOR
Author has previously committed to the repository.

FIRST_TIMER
Author has not previously committed to GitHub.

FIRST_TIME_CONTRIBUTOR
Author has not previously committed to the repository.

MANNEQUIN
Author is a placeholder for an unclaimed user.

MEMBER
Author is a member of the organization that owns the repository.

NONE
Author has no association with the repository.

OWNER
Author is the owner of the repository.

Redo this PR and only allow owner, collaborator, and member types to trigger the workflow using the macro

[github-actions]

OpenHands started fixing the issue! You can monitor the progress here.

[github-actions]

OpenHands started fixing the pr! You can monitor the progress here.

[github-actions]

The workflow to fix this issue encountered an error. Openhands failed to create any code changes.