Safely reference comment body and limit privileged workflow permissions

[AdnaneKhan]

Description of your changes

It should be obvious what this PR does and why you should merge it.

I have:

• Run make reviewable test to ensure this PR is ready for review.

How has this code been tested

[Upbound-CLA]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}