fix(ci): restrict self-hosted PR-Agent comment triggers

.github/workflows/ai-review.yml

@@ -60,13 +60,10 @@ jobs:
         (
           github.event_name == 'issue_comment' &&
           github.event.issue.pull_request &&
-          startsWith(github.event.comment.body, '/') &&
+          github.event.comment.body == '/review' &&
           (
-            github.event.sender.type != 'Bot' ||
-            (
-              github.event.sender.login == 'github-actions[bot]' &&
-              github.event.comment.body == '/review'
-            )
+            contains(fromJSON('["COLLABORATOR","MEMBER","OWNER"]'), github.event.comment.author_association) ||
+            github.event.sender.login == 'github-actions[bot]'
           )
         )
       )