ci: Allow fork PR checkout in pull_request_target workflow

[chiragvp-aws]

actions/checkout@v4 recently defaulted allow-unsafe-pr-checkout to false, breaking CI for all fork PRs. Explicitly set to true to restore previous behavior.

Issue #, if available:

Description of changes:

Testing done:

Merge Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your pull request.

General

• I have read the CONTRIBUTING doc
• I certify that the changes I am introducing will be backward compatible
• I used the commit message format described in CONTRIBUTING doc

Tests

• I have added tests that prove my fix is effective or that my feature works (if appropriate)
• I have added unit and/or integration tests as appropriate to ensure backward compatibility of the changes
• I have verified all code in this commit are well formatted

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.