* restrict the sticky-pull-request-comment permissions * explicitly explain the version compatibility