The action actions/github-script@v7 is not allowed in Khan/gerald because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: Khan/actions@*, Khan/autofix-commit-action@*, Khan/gerald@*, ad-m/github-push-action@*, khan/actions@*, pnpm/action-setup@*. All actions must also be pinned to a full-length commit SHA.