Copied from cf-agents/workflows/issue-triage.yml. Requires FORGEJO_TOKEN org secret (read:issue + write:issue scopes).