ci: skip release/publish/changelog automation on forks (#5756)

nightly-release-v3, publish-npm, auto-changelog-v3 and changelog-v3 had no
repository guard, so any fork with Actions enabled runs them against its own
default branch. On a fork whose master is a PR head (#5462) this keeps
committing fork-generated release bumps, npm version bumps and typedoc output
(with fork source links) straight into the open PR. Guard the jobs with
github.repository == 'wailsapp/wails', matching weekly-release-v2 and
generate-sponsor-image.

Co-authored-by: taliesin-ai <lea.anthony@gmail.com>

Author: taliesin-ai

.github/workflows/auto-changelog-v3.yml

@@ -13,7 +13,7 @@ on:
 
 jobs:
   auto-changelog:
-    if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
+    if: github.repository == 'wailsapp/wails' && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch')
     runs-on: ubuntu-latest
     env:
       GOWORK: "off"

.github/workflows/changelog-v3.yml

@@ -15,6 +15,7 @@ on:
 jobs:
   validate:
     runs-on: ubuntu-latest
+    if: github.repository == 'wailsapp/wails'
     env:
       GOWORK: "off"
     permissions:

.github/workflows/nightly-release-v3.yml

@@ -19,6 +19,7 @@ on:
 jobs:
   nightly-release:
     runs-on: ubuntu-latest
+    if: github.repository == 'wailsapp/wails'
     env:
       GOWORK: "off"
 

.github/workflows/publish-npm.yml

@@ -13,7 +13,7 @@ concurrency:
 jobs:
   detect:
     name: Detect committed changes
-    if: github.event_name != 'workflow_dispatch'
+    if: github.repository == 'wailsapp/wails' && github.event_name != 'workflow_dispatch'
     outputs:
       changed: ${{ steps.package-json-changes.outputs.any_modified == 'true' || steps.source-changes.outputs.any_modified == 'true' }}
     runs-on: ubuntu-latest
@@ -50,7 +50,8 @@ jobs:
     name: Rebuild and publish
     needs: [detect]
     if: >-
-      !failure() && !cancelled()
+      github.repository == 'wailsapp/wails'
+      && !failure() && !cancelled()
       && (github.event_name == 'workflow_dispatch' || needs.detect.outputs.changed == 'true')
     runs-on: ubuntu-latest
     permissions: