This is essentially a revert of 1ed71083. It is safe to use the pull_request_target event for pr-subscriber, because it does not checkout any code from the pull request branch.