Change repo-assist to delegate to task-specific workflows with fewer permissions

[dsyme]

Currently repo-assist is one generic workflow which combines multiple permissions

We want to change this to be a workflow that delegates to specific task workflows which may have reduced, different safe outputs and permissions