[CI] Skip QLTY publish on fork PRs

[soumeh01]

Change

• OIDC tokens are unavailable/restricted for fork PRs, so upload actions that require OIDC fail there
• This condition skips that step on fork PRs, but still allows it on
  • External fork PR -> skipped
  • Internal PR from a branch in the same repo -> runs
  • Push to main -> runs
  • Release workflow -> skipped
  • Dependabot PR -> skipped
• Added an enforcement step in the same cov job that reads cov.xml and fails CI on low coverage.

[qltysh]

Coverage Impact

This PR will not change total coverage.

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[qltysh]

All good ✅