Update bundle-size.yml

Author: tannerlinsley

.github/workflows/bundle-size.yml

@@ -4,7 +4,7 @@ on:
   # We use `pull_request_target` to split trust boundaries across jobs:
   # - `benchmark-pr` checks out PR merge code and runs it as untrusted with read-only permissions.
   # - `comment-pr` runs trusted base-repo code with limited write access to upsert the PR comment.
-  pull_request_target:
+  pull_request:
     paths:
       - 'packages/**'
       - 'benchmarks/**'