[CI] switch from pull_request to pull_request_target for github actions

[svrnm]

We might consider to replace the event target for some of our CI actions from pull_request to pull_request_target, one reason is security (see here), but it also looks like that this may help with a situation where write permissions are not available (e.g. in a PR from an Org to our repo)?

See also Permissions