fix: keep bot approval gate on protected trigger

Author: roomote

.github/workflows/bot-pr-human-approval.yml

@@ -1,7 +1,7 @@
 name: Bot PR human approval gate
 
 on:
-    pull_request:
+    pull_request_target:
         types: [opened, reopened, ready_for_review, converted_to_draft, synchronize]
     pull_request_review:
         types: [submitted, dismissed]