.github/workflows/01-make-dist.yml: try pull_request_target again, to use context of the main repo for actions [#1400]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>

Author: jimklimov

.github/workflows/01-make-dist.yml

@@ -11,17 +11,14 @@ on:
     branches: [ "master", "FTY", "fightwarn", "FTY-obs" ]
     tags:
       - v*
-  pull_request:
+  pull_request_target:
     # The branches below must be a subset of the branches above
     branches: [ "master", "FTY", "fightwarn", "FTY-obs" ]
   schedule:
     - cron: '15 12 * * 0'
   workflow_dispatch:
     # Allow manually running the action, e.g. if disabled after some quietness in the source
 
-# NOTE: These seem to not work for standard GITHUB_TOKEN generated
-# for each run, so a MAKE_DIST_TOKEN was made with equivalent list
-# of "fine-grained" rules.
 permissions:
   contents: read
   issues: write
@@ -56,7 +53,7 @@ jobs:
       with:
         comment-tag: latest-tarball
         message: Dist and Docs will be linked here after the "make dist" job completes.
-        github-token: ${{ secrets.MAKE_DIST_TOKEN }}
+        #github-token: ${{ secrets.MAKE_DIST_TOKEN }}
 
     - name: "GHA-01: Make dist and docs tarballs - report download URL - s1"
       uses: marocchino/sticky-pull-request-comment@v2
@@ -66,8 +63,8 @@ jobs:
         header: latest-tarball-sticky
         only_create: true
         message: Dist and Docs will be linked here after the "make dist" job completes.
-        github-token: ${{ secrets.MAKE_DIST_TOKEN }}
-        GITHUB_TOKEN: ${{ secrets.MAKE_DIST_TOKEN }}
+        #github-token: ${{ secrets.MAKE_DIST_TOKEN }}
+        #GITHUB_TOKEN: ${{ secrets.MAKE_DIST_TOKEN }}
 
     - name: Checkout repository
       uses: actions/checkout@v5
@@ -251,7 +248,7 @@ jobs:
                 artifact_id: id,
               })
             })
-        github-token: ${{ secrets.MAKE_DIST_TOKEN }}
+        #github-token: ${{ secrets.MAKE_DIST_TOKEN }}
 
     - name: Upload tarball and its checksum artifacts
       uses: actions/upload-artifact@v4
@@ -274,7 +271,7 @@ jobs:
       with:
         comment-tag: latest-tarball
         message: Dist and Docs [NUT-tarballs-${{ steps.subst-github-ref-name.outputs.result }}.zip}](${{ steps.upload_artifact.outputs.artifact-url }}) are available for commit ${{ github.sha }}
-        github-token: ${{ secrets.MAKE_DIST_TOKEN }}
+        #github-token: ${{ secrets.MAKE_DIST_TOKEN }}
 
     # https://github.com/marocchino/sticky-pull-request-comment
     - name: "GHA-01: Make dist and docs tarballs - report download URL - s2"
@@ -285,5 +282,5 @@ jobs:
         header: latest-tarball-sticky
         only_create: true
         message: Dist and Docs [NUT-tarballs-${{ steps.subst-github-ref-name.outputs.result }}.zip}](${{ steps.upload_artifact.outputs.artifact-url }}) are available for commit ${{ github.sha }}
-        github-token: ${{ secrets.MAKE_DIST_TOKEN }}
-        GITHUB_TOKEN: ${{ secrets.MAKE_DIST_TOKEN }}
+        #github-token: ${{ secrets.MAKE_DIST_TOKEN }}
+        #GITHUB_TOKEN: ${{ secrets.MAKE_DIST_TOKEN }}