pull_request_review does not have enough permission when ran from a fork

[casassg]

As seen in https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_review

pull_request_review won't work for forked repositories PRing into the main repo.