CI: remove two-step-pr-approval action (hashicorp#671)

This action doesn't appear to do anything meaningful, as we already have
mandated org-wide branch protection rules in place. And it requires a write
token, so that represents extra attack surface we don't need.

Author: tgross