build: Only run release-ghcr on pull_request_target

The `pull_request` trigger tries to merge the base branch, and
Hydra uses the commit tip, so nix will usually not resolve the
correct artifact. `pull_request_target` uses the commit tip

Author: sgillespie

.github/workflows/release-ghcr.yml

@@ -5,7 +5,7 @@ on:
     types:
       - published
   push: {}
-  pull_request: {}
+  pull_request_target: {}
   workflow_dispatch: {}
   schedule:
     # Everyday at 4:00 AM UTC