Run the code from the PR, not from main

[kevinbackhouse]

The smoke test isn't working properly, because it's checking out the code from main, rather than the pull request. I've added a step that uses the GitHub CLI to checkout the pull request.

[Copilot]

Pull Request Overview

This PR updates the smoketest workflow to better handle PR comments by adding explicit PR validation and changing the checkout mechanism from the standard GitHub Actions checkout action to using the GitHub CLI.

• Added a conditional check to ensure the workflow only runs when comments are on pull requests
• Replaced the actions/checkout@v5 action with a gh pr checkout command using the PR number from the event context

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[kevinbackhouse]

@JarLob: what do you think about the CodeQL alert? I think this code is safe because we're using the branch-deploy action.

[JarLob]

Yes, this is because there is no exception for the branch deploy action in the rule.