Change workflow trigger from pull_request to pull_request_target

This allows the workflow to access secret variables which are not accessible
in pull_request events.

[ci skip]