fix shell/code injection vulnerability in pr-review.yaml

@GREENRAT-K405 Can you create the fix you did for the other three repositories here too?
Referring to: https://github.com/ControlCore-Project/concore-lite/pull/21