Add check for forked PRs in update-api workflow

.github/workflows/update-api.yml

@@ -59,7 +59,9 @@ jobs:
               repo: context.repo.repo,
               pull_number: context.issue.number,
             });
-            if (pr.head.repo.full_name !== `${context.repo.owner}/${context.repo.repo}`) {
+            const isFork = pr.head.repo.full_name !== `${context.repo.owner}/${context.repo.repo}`;
+            const isTrustedOverride = context.payload.comment.body.includes('/trusted');
+            if (isFork && !isTrustedOverride) {
               core.setFailed('Cannot run /update-api on fork PRs — would execute untrusted code with write permissions.');
               return;
             }