Switch pull_request to pull_request_target so secrets and OIDC tokens
are available when reviewing PRs from forks. Also add pull-requests: write
permission so the action can post review comments.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>