fix: resolve CodeRabbit findings — match trigger text, strip hidden chars

Corrected workflow description to say "every pull request" to match the
actual pull_request trigger in the YAML. Verified no hidden Unicode
characters remain and all npx commands are pinned to @0.2.1.

Author: flvmnt

apps/docs/content/docs/guides/integrations/pgfence.mdx

@@ -91,7 +91,7 @@ npx --yes @flvmnt/pgfence@0.2.1 analyze --ci --max-risk medium prisma/migrations
 
 Add pgfence as a safety check that runs before `prisma migrate deploy` in your CI/CD pipeline. This catches dangerous migration patterns before they reach your production database.
 
-Here is a GitHub Actions workflow that runs pgfence on every push that includes migration changes:
+Here is a GitHub Actions workflow that runs pgfence on every pull request that includes migration changes:
 
 ```yaml title=".github/workflows/migration-safety.yml"
 name: Migration safety check