fix: harden CI workflow: switch to pull_request trigger and remove unnecessary id-token:write#214

gvanrossum merged 2 commits intomicrosoft:mainmicrosoft/typeagent-py:mainfrom

hgvfhsrtyvrt456vtg:fix/ci-securityhgvfhsrtyvrt456vtg/typeagent-py:fix/ci-securityCopy head branch name to clipboard