Restrict AI review to non-fork PRs only

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: oferlmntr

.github/workflows/ai-review.yml

@@ -1,7 +1,7 @@
 name: AI Review
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize]
 
 permissions:
@@ -11,10 +11,9 @@ permissions:
 jobs:
   review:
     runs-on: ubuntu-latest
-    if: github.event.pull_request.draft == false
+    if: github.event.pull_request.head.repo.full_name == github.repository
     steps:
       - uses: ofershap/ai-pr-reviewer@v1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           openai-api-key: ${{ secrets.OPENAI_API_KEY }}
-