Forks should be able to change the audits.yml file

[enisdenjo]

Continuation of #29.

Using pull_request_target as the trigger in workflows wont allow forks to change the workflows; meaning, new implementation audits PRs wont work - we'd need to prepare.