Allow Pushing to Fork

[squat]

peter-evans/create-pull-request has an input named push-to-fork which allows pushing PR branches to a fork and creating the PR to the parent repository from the fork. This allows following the

principle of least privilege by using a dedicated user acting as a machine account ... [that] ... only has read access to the main repository.

In light of all of the recent supply-chain hacks, I think enabling pushing PR branches to forks is a good feature for update-flack-lock so that repo-owners can lock down their repos and prevent issuing PATs to their bot accounts with write permissions on the main repository.

[grahamc]

That's really cool, and would definitely solve some super annoying problems we have ourselves. In fact we have a huge temporal workflow that is partially because of this very problem: https://x.com/grhmc/status/2041597860223816175

Would you mind opening a PR?

[squat]

Ah this is awesome! Thanks for merging so quickly. I was able to remove my bot as a collaborator from so many repos already! I'm feeling much more confident now