fix: use full commit hash for CTA Assistant action

[devin-ai-integration]

fix: use full commit hash for CTA Assistant action

Summary

Fixes the CTA Assistant workflow that was merged with a shortened commit hash causing CI failures. The original implementation used 7a3ca8b which GitHub Actions cannot resolve, now updated to the full commit hash 7a3ca8b03e62e9ab0df31f3a6d151386e5dd80bd. Also changes the trigger from pull_request_target to pull_request for consistent behavior with other workflows in the repository.

Review & Testing Checklist for Human

This is a medium risk fix for a production workflow handling legal compliance:

• Verify commit hash: Confirm 7a3ca8b03e62e9ab0df31f3a6d151386e5dd80bd exists and points to the correct version of WalletConnect/actions/github/cta-assistant
• Test workflow trigger: Open a test PR to verify the CTA workflow actually runs and completes successfully
• Security review: Confirm changing from pull_request_target to pull_request is appropriate and doesn't introduce security risks for this workflow
• End-to-end testing: Verify CTA signature collection process still works correctly with the updated action

Notes

• This fixes a hotfix situation - the original CTA workflow was already merged but failing due to the shortened hash
• The cta-signatures branch was already created in the previous implementation
• Requested by Ben Kremer (@bkrem)
• Devin session: https://app.devin.ai/sessions/201c5538c1ee4a178f275cb9cde9f989

---

Note

Pin CTA Assistant GitHub Action to a full commit SHA and adjust a permissions comment.

• CI/CD:
  • CTA workflow (.github/workflows/cta.yml):
    • Pin WalletConnect/actions/github/cta-assistant from @7a3ca8b to @7a3ca8b03e62e9ab0df31f3a6d151386e5dd80bd.
    • Update comment describing required permissions.

^{Written by Cursor Bugbot for commit b8cbdc9. This will update automatically on new commits. Configure here.}

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[bkrem]

rebase onto latest master