Add clarity to build.author conditionals around spoofing

[KevinGrandon]

Conditionals are a really great feature that we'd like to use, but there was some uncertainty as to where the build.author information comes from. Can we be sure that this data comes from GitHub metadata, and can't be spoofed per-commit?

Adding some additional information to the docs around this would help alleviate concern. Thanks!

[harrietgrace]

Great suggestion @KevinGrandon! I'll chat with the team about what we can add that would provide the best info around this. I'll leave this issue open until it's updated 👍🏻