Automate internal test runs when a PR is opened

[TimHess]

Follow-up ideas from #403:

• Open an internal PR, and keep it up-to-date if public changes
• Propagate running workflows internally on public push
• Report back the workflow outcomes to public