Update evaluate.yaml with restrictions

Author: pamelafox

.github/workflows/evaluate.yaml

@@ -15,6 +15,7 @@ permissions:
 jobs:
   evaluate:
     if: |
+      contains('["OWNER", "CONTRIBUTOR", "COLLABORATOR", "MEMBER"]', github.event.comment.author_association) &&
       github.event.issue.pull_request &&
       github.event.comment.body == '/evaluate'
     runs-on: ubuntu-latest