🌱 Add assignment-helper workflow

[clubanderson]

Adds assignment-helper using shared workflow from infra.

Generated with Claude Code

[kubestellar-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign clubanderson for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

In general, the fix is to add an explicit permissions block that grants only the minimal GITHUB_TOKEN scopes required by this workflow. This can be done at the top level of the workflow (applies to all jobs) or under the specific job. Since this file contains a single job, either location is fine; adding it at the job level keeps the scope clear and local.

The best minimal, non-breaking fix here is to add permissions: { contents: read } to the assignment-helper job, since most reusable workflows at least need to read repository contents. We should not assume the need for write operations (like issues: write or pull-requests: write) without seeing evidence; if the reusable workflow requires more, it will fail and can then be adjusted. Concretely, in .github/workflows/assignment-helper.yml, under jobs:, and indented to align with uses:, insert:

    permissions:
      contents: read

No imports or additional methods are needed; this is purely a YAML configuration change within the GitHub Actions workflow.