Skip security review when only update docs

We already finished a security review on #5 (closed), now we should skip it when only update docs.

Detail Condition: All the commit files are behind dir jh/doc, this condition maybe need use the API ability to realize.

Refer to

API Reference

Merge requests API - Get single MR changes

triage-ops API ability

triage/triage/event.rb#resource_author
triage/triage.rb#user