Gate the AI security review by the security-review environment

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>

Author: ccojocar

.github/workflows/ci.yml

@@ -69,8 +69,9 @@ jobs:
       - name: Check taint benchmark regression
         run: bash tools/check_taint_benchmark.sh
   barry-ai-security-review:
-    if: github.event_name == 'pull_request' || github.event_name == 'pull_request_target'
+    if: github.event_name == 'pull_request_target'
     runs-on: ubuntu-latest
+    environment: security-review
     permissions:
       security-events: write
       pull-requests: write