Drone: add optional approval step to run pipelines on PRs from forks (from users who are not collaborators?)

Github Actions now has a setting

I would greatly appreciate the same setting (differentiating first-time and outside collaborators), but the basic feature, simply requiring an approval on any PR from a fork, would work fine too.