Fix permissions and run conditions on workflows

.github/workflows/auto-merge.yml

@@ -1,16 +1,19 @@
 name: Enable Auto Merge
-on: pull_request
-
-permissions:
-  contents: write
-  pull-requests: write
+on:
+  pull_request_target:
+    types:
+      - opened
+      - reopened
+      - edited
+    branches:
+      - main
 
 jobs:
   auto-merge:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'wbrawner' || github.actor == 'dependabot[bot]' }}
     steps:
-      - name: Enable auto-merge for Dependabot PRs
+      - name: Enable auto-merge
         run: gh pr merge --auto --rebase "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}

.github/workflows/test.yml

@@ -3,6 +3,10 @@ name: Test
 on:
   pull_request:
 
+permissions:
+  statuses: write
+  checks: write
+
 jobs:
   validate:
     runs-on: ubuntu-latest