[ci] restrict jobs from running on forks