Merge pull request #1478 from tgstation/FinalFix

Do not trigger CI when labelling a closed PR

.github/workflows/auto-approve-dominions-prs.yml

@@ -4,8 +4,7 @@
 name: "Auto-Approve Dominion's PRs"
 
 on:
-  pull_request:
-    types: [opened, synchronize]
+  pull_request_target:
     branches:
     - dev
     - master

.github/workflows/ci-suite.yml

@@ -32,7 +32,7 @@ jobs:
   security-checkpoint:
     name: Check CI Clearance
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.id != github.event.pull_request.base.repo.id
+    if: github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.id != github.event.pull_request.base.repo.id && github.event.pull_request.state == 'open'
     steps:
     - name: Comment on new Fork PR
       if: github.event.action == 'opened' && !contains(github.event.pull_request.labels.*.name, 'CI Cleared')