ci: guard CVE/license scanning workflows to canonical repo (finos#2753)

Forks lack NVD_API_KEY and other secrets, causing consistent twice-daily failures that are infrastructure noise rather than real findings.

Author: jpgough-ms

.github/workflows/cve-scanning-maven.yml

@@ -20,6 +20,7 @@ on:
 
 jobs:
     depchecktest:
+        if: github.repository == 'finos/architecture-as-code'
         runs-on: ubuntu-latest
         strategy:
             matrix:

.github/workflows/cve-scanning-node.yml

@@ -24,6 +24,7 @@ on:
 jobs:
     node-modules-scan:
         name: ${{ matrix.module-folder }}-node-scan
+        if: github.repository == 'finos/architecture-as-code'
         runs-on: ubuntu-latest
         environment:
             name: code-scan

.github/workflows/license-scanning-maven.yml

@@ -17,6 +17,7 @@ env:
 
 jobs:
     scan:
+        if: github.repository == 'finos/architecture-as-code'
         runs-on: ubuntu-latest
         strategy:
             matrix:

.github/workflows/license-scanning-node.yml

@@ -14,6 +14,7 @@ on:
 
 jobs:
     scan:
+        if: github.repository == 'finos/architecture-as-code'
         runs-on: ubuntu-latest
         strategy:
             matrix: