ci: remove pull_request_target trigger from release-drafter

Removes the pull_request_target trigger from the release-drafter workflow to
eliminate exposure to the supply-chain-attack pattern abused in the TanStack
NPM compromise.

See: https://tanstack.com/blog/npm-supply-chain-compromise-postmortem

Author: ryantm

.github/workflows/release-drafter.yml

@@ -10,9 +10,6 @@ on:
   pull_request:
     # Only following types are handled by the action, but one can default to all as well
     types: [opened, reopened, synchronize]
-  # pull_request_target event is required for autolabeler to support PRs from forks
-  pull_request_target:
-    types: [opened, reopened, synchronize]
 
 permissions:
   contents: read