ci: scope github release workflows

.github/workflows/android-release.yml

@@ -21,6 +21,7 @@ permissions:
 
 jobs:
   build:
+    if: ${{ github.server_url == 'https://github.com' }}
     name: Build signed APK
     runs-on: ubuntu-latest
     steps:

.github/workflows/auto-version.yml

@@ -31,7 +31,7 @@ permissions:
 jobs:
   version:
     runs-on: ubuntu-latest
-    if: "!contains(github.event.head_commit.message, 'Release v') && !contains(github.event.head_commit.message, '[skip ci]')"
+    if: "github.server_url == 'https://github.com' && !contains(github.event.head_commit.message, 'Release v') && !contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/build-apk.yml

@@ -14,6 +14,7 @@ env:
 
 jobs:
   build-apk:
+    if: ${{ github.server_url == 'https://github.com' }}
     runs-on: ubuntu-latest
     permissions:
       contents: write

.github/workflows/docker-publish.yml

@@ -24,6 +24,7 @@ env:
 
 jobs:
   build:
+    if: ${{ github.server_url == 'https://github.com' }}
     # Build one variant per matrix entry, push by digest only.
     name: Build ${{ matrix.platform }}
     runs-on: ${{ matrix.runner }}
@@ -80,6 +81,7 @@ jobs:
           retention-days: 1
 
   merge:
+    if: ${{ github.server_url == 'https://github.com' }}
     # Combine the two single-platform digests into one multi-arch manifest
     # published under the real tags (vX.Y.Z and latest).
     name: Merge manifests

.github/workflows/version-bump.yml

@@ -30,6 +30,7 @@ permissions:
 
 jobs:
   bump:
+    if: ${{ github.server_url == 'https://github.com' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout