Merge pull request #3017 from blacklanternsecurity/dev

Merge pull request #3016 from blacklanternsecurity/merge-stable-into-dev

Merge remote-tracking branch 'origin/stable' into merge-stable-into-dev

Merge pull request #3013 from blacklanternsecurity/fix-cla-bot-skip

drop unnecessary actions:write and contents:write permissions

fix CLA workflow to properly skip bots and check all committers

fix: disable lock-pullrequest-aftermerge in CLA workflow

fix: use org-scoped app token for reliable CLA membership check

fix: use org-scoped app token for membership check

fix: use author_association for CLA membership check

fix: set commit status to success when skipping CLA for org members

fix: handle org membership check for both PR and comment events

fix: use GITHUB_TOKEN for org membership check in CLA workflow

ci: use dynamic org membership check for CLA

ci: add org members to CLA allowlist