fix(CI): split documentation workflow to avoid pull_request_target checkout block

[dlabaj]

Summary

• Switches the Documentation workflow from pull_request_target to pull_request so fork PRs no longer trigger the checkout security block from actions/checkout@v4
• For pull_request events, builds docs and a11y tests then uploads results as artifacts (no secrets needed)
• Adds a new documentation-deploy.yml workflow triggered by workflow_run that downloads the artifacts and deploys to Surge using repo secrets
• issue_comment and workflow_call paths are unchanged — they still build and deploy directly since they have access to secrets

Closes #12601

Test plan

• Open a PR from a fork and verify the Documentation workflow builds successfully
• Verify the Documentation deploy workflow triggers after the build completes and deploys the Surge preview
• Verify the PR comment with preview/a11y links is posted
• Verify the issue_comment path still works (re-trigger via bot comment)
• Verify the release workflow (workflow_call) still builds and deploys docs

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 197bb0ae-2f14-41e7-87cb-3f8dc746562a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[patternfly-build]

Preview: https://pf-react-pr-12621.surge.sh

A11y report: https://pf-react-pr-12621-a11y.surge.sh

[dlabaj]

Closing: branch was created off 6.6.x instead of main, causing merge conflicts. Reopened as a clean PR from main with only the documentation workflow fix.