A team lead at your company wants a group of contractors to be able to manage issues and pull requests—applying labels, closing issues, requesting reviews, and marking duplicates—on a specific repository, but they must NOT be able to push code to any branch or change repository settings. As an organization owner, which built-in repository role should you assign to the contractors' team to grant exactly this level of access with the least privilege?