Duplicate Test Runs in CI

[MaciejKaszynski]

What

Currently we need to run tests the tests to build the docs.
This means we need to use the pull_request_target as we need secrets to post github pr comments with the results.

Ideally we would move the tests to the pr workflow so that we can use a normal pull_request trigger, allowing us to change the workflow when needed and test it.

Do we really need the comments?

Acceptance Criteria (DoD)

• Only run jobs that need secrets on the pull_request_target

How

No response

[danth]

https://cheatsheetseries.owasp.org/cheatsheets/GitHub_Actions_Security_Cheat_Sheet.html#avoid-using-the-pull_request_target-trigger