Change CodeRabbit plan trigger from labeled to assigned

Signed-off-by: Anshul  <137977998+sudo-anshul@users.noreply.github.com>

Author: sudo-anshul

.github/workflows/bot-coderabbit-plan-trigger.yml

@@ -1,25 +1,31 @@
-# Triggers CodeRabbit's plan feature when a difficulty label is added to an issue.
-# Only fires for skill: beginner/intermediate/advanced labels, preventing duplicate runs.
+# Triggers CodeRabbit plan only as an assignment fallback.
+# Primary trigger path is the approved workflow after unlock.
 name: CodeRabbit Plan Trigger
 on:
   issues:
-    types: [labeled]
+    types: [assigned]
 
 permissions:
   issues: write
   contents: read
 
 jobs:
   coderabbit_plan_trigger:
-    runs-on: ubuntu-latest
+    runs-on: hl-sdk-py-lin-md
     concurrency:
       group: coderabbit-plan-${{ github.event.issue.number }}
       cancel-in-progress: false
-    # Only run when the newly added label is a difficulty label (skill: beginner/intermediate/advanced)
+    # Fallback only: assigned, open, unlocked, approved, and difficulty-labeled issue.
     if: >
-      github.event.action == 'labeled' &&
+      github.event.action == 'assigned' &&
       github.event.issue.state == 'open' &&
-      contains(fromJson('["skill: beginner","skill: intermediate","skill: advanced"]'), github.event.label.name)
+      github.event.issue.locked == false &&
+      contains(github.event.issue.labels.*.name, 'approved') &&
+      (
+        contains(github.event.issue.labels.*.name, 'skill: beginner') ||
+        contains(github.event.issue.labels.*.name, 'skill: intermediate') ||
+        contains(github.event.issue.labels.*.name, 'skill: advanced')
+      )
 
     steps:
       - name: Harden the runner
@@ -29,6 +35,8 @@ jobs:
 
       - name: Checkout repository
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+        with:
+          persist-credentials: false
 
       - name: Trigger CodeRabbit Plan
         env: