guard-workflow-test

Revert to pull_request_target + API-only with fixes (grep -F, simplified metadata)

Fix: pass --repo to gh pr comment (no git context in workflow_run)

Use git diff instead of API in detect workflow

Switch to workflow_run two-workflow pattern

Switch to API-based detection with grep -F fix