github: Actions pull_request_target and environment branch protections changes
GitHub will change how Actions' pull_request_target and environment branch protection rules are evaluated for pull-request-related events, effective 2025-12-08, to reduce security-critical exposures.