allow local PRs without lockfiles to build

Author: chrisdrackett

.github/actions/setup-node/action.yml

@@ -16,3 +16,5 @@ runs:
     - name: Install dependencies
       run: yarn install
       shell: bash
+      env:
+        YARN_ENABLE_HARDENED_MODE: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork && '1' || '0' }}