[release-1.6] ci: Fix authorization logic in pull_request_target workflows (#1563)

[rm3l]

Description

Manual cherry-pick of #1563

Summary by Sourcery

Fix the pull_request_target CI workflows by updating the authorization logic to use the PR author’s login against an updated approvers list and by checking out the exact commit SHA rather than the branch ref.

CI:

• Determine internal/external environment using github.event.pull_request.user.login with a revised approvers list
• Use github.event.pull_request.head.sha for the checkout ref instead of head.ref in PR workflows

[sourcery-ai]

Hey there - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[rm3l]

/hold

On hold until 1.6.4 is out.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

PR images are available:

1. https://quay.io/rhdh-community/operator:0.6.4-pr-1565-73990b0
2. https://quay.io/rhdh-community/operator-bundle:0.6.4-pr-1565-73990b0
3. https://quay.io/rhdh-community/operator-catalog:0.6.4-pr-1565-73990b0