[chore] Avoid using pull_request_target on tidy-dependencies workflow (#15357)

<!--Ex. Fixing a bug - Describe the bug and how this fixes the issue.
Ex. Adding a feature - Explain what this achieves.-->
#### Description

Switches to `pull_request` on the tidy dependencies workflow, see
#15356 (comment)

Co-authored-by: Alex Boten <223565+codeboten@users.noreply.github.com>

Author: mx-psi

.github/workflows/tidy-dependencies.yml

@@ -1,6 +1,6 @@
 name: "Project: Tidy"
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, ready_for_review, synchronize, reopened, labeled, unlabeled]
     branches:
       - main