ci: ✨ check PR author and not actor

Allowing external contributors to run actions would be quite bad.
We just need to expand the rights of some of the team members

.github/workflows/pr-preview.yml

@@ -23,11 +23,12 @@ jobs:
     outputs:
       level: ${{ steps.access_check.outputs.has-write }}
     steps:
-      - name: 🗝️ Check if initiator has write access
+      - name: 🗝️ Check if author has write access
         id: access_check
         run: |
-          PERMISSION=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" "https://api.github.com/repos/${{ github.repository }}/collaborators/${{ github.actor }}/permission" | jq -r .permission)
-          echo "Permissions of ${{ github.actor }}: ${PERMISSION}"
+          PERMISSION=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" "https://api.github.com/repos/${{ github.repository }}/collaborators/${{ github.event.pull_request.user.login }}/permission" | jq -r .permission)
+          echo "Workflow ran by ${{ github.actor }}"
+          echo "Permissions of ${{ github.event.pull_request.user.login }}: ${PERMISSION}"
           echo "has-write=${PERMISSION}" >> $GITHUB_OUTPUT
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}