Adding gitspiegel-trigger workflow (#74)

Using a workflow to trigger mirroring instead of a webhook allows us to
reuse "Approving workflow runs from public forks" GitHub feature to
somewhat protect us from malicious PRs