Allow trusted base-branch checkout in pull_request_target validation
#37099
+310
−2
pull_request_target validation
#37099