Security fix for `self-comment-ci.yml` (#35548)
* Revert "Disable `.github/workflows/self-comment-ci.yml` for now (#35366)"
This reverts commit ccc4a5a59b2d4134a49971915db0710e7a8c7824.
* fix
* fix
* fix
* least permission
* add env
---------
Co-authored-by: ydshieh <ydshieh@users.noreply.github.com>
