fix(ci): restrict issue comments to members or owners (apache#28633)

Author: dpgaspar

.github/workflows/update-monorepo-lockfiles.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     if: >
       (github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]') ||
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@supersetbot trigger-dependabot-lockfile') && github.event.issue.pull_request)
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@supersetbot trigger-dependabot-lockfile') && github.event.issue.pull_request && (github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER'))
     defaults:
       run:
         working-directory: superset-frontend