fix(sec): enforce author authorization check on Linear bounty commands (#171) - #179

All four acceptance criteria are met. The pull request adds an authorization check to maybeHandleBountyLinearComment that validates whether the Linear actor/user is an admin or matches the workspace integration owner before processing bounty commands, supported by a unit test suite. One warning is flagged regarding loose equality checks on optional ID fields.