TEMPORARY: Exclude write permission from trusted collaborators

This commit is for testing the label-and-comment path and must be reverted
before merge. It temporarily treats write access as untrusted so the current
PR will exercise Needs-Restricted-Paths-Review assignment again.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: rwgk

.github/workflows/restricted-paths-guard.yml

@@ -167,7 +167,7 @@ jobs:
             fi
 
             case "$COLLABORATOR_PERMISSION" in
-              admin|maintain|write|triage|read)
+              admin|maintain|triage|read)
                 HAS_TRUSTED_SIGNAL=true
                 LABEL_ACTION="not needed (collaborator permission is a trusted signal)"
                 TRUSTED_SIGNALS="collaborator_permission:$COLLABORATOR_PERMISSION"