phpstan-bot: react only on 'open' pull requests

Author: staabm

.github/workflows/claude-react-on-review.yml

@@ -10,6 +10,7 @@ jobs:
     if: >
       github.event.pull_request.user.login == 'phpstan-bot'
       && github.event.review.user.login != 'phpstan-bot'
+      && github.event.pull_request.state == 'open'
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2