chore: PR-check: don't run it using pull_requset_target as it may suffers secret leak (#4615)

Signed-off-by: Tao He <[email protected]>

Author: sighingnow

.github/workflows/pr-check.yml

@@ -1,7 +1,8 @@
 name: PR Check
 
 on:
-  pull_request_target:
+  pull_request_review:
+    types: [submitted]
     branches:
       - main