fix: change CI trigger from pull_request_target to pull_request

CRITICAL: pull_request_target was causing CI to test main branch code
instead of the actual PR changes, explaining all our CI failures.

Issues with pull_request_target:
- Security risk: Runs with write permissions on target repo
- Wrong code: Tests target branch (main) instead of PR branch
- Stale results: Our fixes weren't being tested at all

With pull_request:
- Tests the actual PR code with our fixes
- No unnecessary write permissions
- Proper CI validation of proposed changes

This should immediately fix all CI test discovery issues.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: nirga

.github/workflows/ci.yml

@@ -1,6 +1,6 @@
 name: CI
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize]
   push:
     branches: