github: Actions pull_request_target and environment branch protections changes

GitHub will change how Actions’ pull_request_target and environment branch protection rules are evaluated for pull-request-related events, effective 2025-12-08, to reduce security-critical exposures.

• Source: GitHub