Merge pull request #459 from 1Password/mrj/fix-nix-ci

fix(ci): Run automated PR approval on `pull_request:` instead of `pull_request_target:`

Author: mrjones2014

.github/workflows/approve-flake-lock-prs.yml

@@ -5,9 +5,9 @@ name: Approve flake.lock PRs (still require 1 human approval)
 permissions:
   pull-requests: write
 on:
-  pull_request_target:
-    paths:
-      - 'flake.lock' # only run if flake.lock has changed
+  pull_request:
+    paths: # only run if flake.lock has changed
+      - flake.lock
 jobs:
   approve-flake-lock-prs:
     runs-on: ubuntu-latest