Safely reference comment body and limit privileged workflow permissions · upbound/official-providers-ci@0c58064