security: harden PR review workflow triggers and checkout#158

Draft

enyst wants to merge 3 commits intomainfrom

openhands/harden-pr-review-workflow-security

Commits on Apr 8, 2026

security: harden PR review workflow triggers and checkout
openhands-agent
committed
refactor: move uv cache hardening to separate pr
openhands-agent
committed
Merge branch main into openhands/harden-pr-review-workflow-security
openhands-agent
committed