Try forking first before pushing PR

[saschanaz]

To make the bot work with #1127

[saschanaz]

Heh, it's natural that PRs modifying workflows can't access secrets.

However, it’s important that the author of a pull request can’t access the repository’s secrets (e.g. by updating a workflow file to print out the secrets instead of running tests).

It's more secure that I thought, and I'm actually relieved!

[saschanaz]

So, please merge this when any of you maintainers have a time 😉

[orta]

Nice