webhook API token doesn't work when I'm only a maintainer not the author

[programmerjake]

Summary

I set up a web hook for https://content.luanti.org/packages/ApolloX/oretracker/ but it gives the error: API token does not have access to the package I have the API token limited to the oretracker package. Looking through the code, it appears you need to also check if the token's owner is a maintainer of the package, not only the author: https://github.com/luanti-org/contentdb/blob/4004c1650436733f1f820443e32630362728a772/app/models/init.py#L54-L61

Steps to reproduce

Create package where you are a maintainer but not the author. Set up a web hook from GitHub to automatically create releases from tags. Push a new tag, observe the error.