ci: skip privileged PR jobs on fork PRs

Author: nicktrn

.github/workflows/claude-md-audit.yml

@@ -16,7 +16,9 @@ concurrency:
 
 jobs:
   audit:
-    if: github.event.pull_request.draft == false
+    if: >-
+      github.event.pull_request.draft == false &&
+      github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/helm-pr-prerelease.yml

@@ -54,6 +54,7 @@ jobs:
 
   prerelease:
     needs: lint-and-test
+    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read