Theme preview: use pull_request_target (#8011)

.github/workflows/preview-theme.yml

@@ -1,7 +1,7 @@
 name: Preview Theme Changes
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize]
 permissions:
   pull-requests: write