[llvm] workflows: Add a job for auditing release assets (PR #92829)

[Tobias Hieta via llvm-commits]

================
@@ -0,0 +1,45 @@
+name: Release Asset Audit
+
+on:
+  workflow_dispatch:
+  schedule:
+    # * is a special character in YAML so you have to quote this string
+    # Run once an hour
+    - cron:  '5 * * * *'
----------------
tru wrote:

There is no event to trigger the workflow on upload? I am a bit worried about leaving potential vectors up for in the worst case an hour.

https://github.com/llvm/llvm-project/pull/92829