RepoKitteh based envoyproxy organization membership management

[htuch]

User story:

• Envoy maintainer wants to /assign a new GH user who is not in the envoyproxy org or @envoyproxy/assignable team. The maintainer issues a /assign <user>.
• RepoKitteh notices the missing membership. It uses GH teams APIs to add the user to the organization and team. This is invite-based.
• The new GH user accepts the invite and pings the issue.
• The maintainer reissues /assign <user> and it works.

@envoyproxy/maintainers @itayd WDYT?

[htuch]

One thing I worry about is how to do this safely in RK, since you need admin-level IAM AFAIK.

[itayd]

This will require write access. Not sure if you can assign specific permission to specific user?