Try nicer way to match github actor

[nirs]

Instead of horrible one line json, try to check if the pull request author is a member of the organization[1].

[1] https://michaelheap.com/github-actions-check-permission/