CI(static): update token permission

Use "pull_request_target" to access the comment permission.
Ref: 
- https://github.com/platisd/clang-tidy-pr-comments#using-this-action-to-safely-perform-analysis-of-pull-requests-from-forks
- https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Author: caic99

.github/workflows/static.yaml

@@ -1,7 +1,7 @@
 name: Static Analysis
 
 on:
-  pull_request:
+  pull_request_target:
 
 jobs:
   clang-tidy: