GH-200 decision sheets

• Distributing an action: private vs public vs Marketplace
• pull_request vs pull_request_target for fork pull requests
• GitHub-hosted vs self-hosted runners: when self-hosted is safe