use "pull_request_target" in privacy review action (#3025)

* update privacy-review action to latest

* bump dep

Author: ladamski

.github/workflows/privacy-review.yml

@@ -1,16 +1,16 @@
 name: Create Asana task for Privacy Review
 
 on:
-  pull_request:
+  pull_request_target:
     types: [ labeled ]
 
 jobs:
   call-privacy-review:
     if: contains(github.event.label.name, 'privacy review')
-    uses: duckduckgo/native-github-asana-sync/.github/workflows/privacy-review.yml@v1.5
+    uses: duckduckgo/native-github-asana-sync/.github/workflows/privacy-review.yml@v1.7
     with:
       team_name: 'Extension'
-      ref: 'v1.3'
+      ref: 'v1.7'
     secrets:
       asana_pat: ${{ secrets.ASANA_ACCESS_TOKEN }}
       github_pat: ${{ secrets.DAXMOBILE_TOKEN }}