mainmatter/continue-on-error-comment fails on PRs

`mainmatter/continue-on-error-comment` fails on PRs with `Error: Resource not accessible by integration`

https://github.com/mainmatter/continue-on-error-comment#permissions says to set d

```
permissions:
pull-requests: write
```

but that is true in this workflow already and it is not working.

It alternatively suggests using `pull_request_target` but that is not safe to do in any workflow that runs code from the PR.

I think the best way to run it would be to have another workflow that runs on `pull_request_target` that checks the results of the CI workflow.

Inspect the existing CI workflow that invokes mainmatter/continue-on-error-comment and reproduce the Resource not accessible by integration error. Review the action's permissions guidance and the security implications of pull_request versus pull_request_target. Done means PR results can be commented on without running untrusted PR code in a privileged workflow.

Written by the indexing model from the issue text.