feat: check workflow actor is in the sdk team

Author: CodeSchwert

.github/scripts/check_team_membership.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+USER=$1
+TOKEN=$2
+
+response=$(curl -s -H "Authorization: token $TOKEN" "https://api.github.com/orgs/immutable/teams/sdk/memberships/$USER")
+
+if echo "$response" | grep -q '"state": "active"'; then
+  echo "true"
+else
+  echo "false"
+fi

.github/workflows/update-version.yml

@@ -10,10 +10,17 @@ on:
 
 jobs:
   update:
-    if: contains('["nattb8"]', github.actor)
     runs-on: ubuntu-latest
-
     steps:
+    - name: Check team membership
+      id: check_team
+      run: |
+        IS_MEMBER=$(./.github/scripts/check_team_membership.sh "${{ github.actor }}" "${{ secrets.GITHUB_TOKEN }}")
+        if [[ "$IS_MEMBER" != "true" ]]; then
+          echo "Not a member of the SDK team, skipping update"
+          exit 1
+        fi
+
     - name: Checkout code
       uses: actions/checkout@v3