Merge branch '3502507-no-pipelines-on-forks-tags' into 'main'

Only run on tags in the canonical project.

See merge request !320

includes/include.drupalci.workflows.yml

@@ -20,7 +20,7 @@ workflow:
     - if: $CI_MERGE_REQUEST_IID
     - if: $CI_PIPELINE_SOURCE == 'merge_request_event'
     # Run on tags
-    - if: $CI_COMMIT_TAG
+    - if: $CI_COMMIT_TAG && $CI_PROJECT_ROOT_NAMESPACE == "project"
     # Run when called from an upstream pipeline https://docs.gitlab.com/ee/ci/pipelines/downstream_pipelines.html?tab=Multi-project+pipeline#use-rules-to-control-downstream-pipeline-jobs
     - if: $CI_PIPELINE_SOURCE == 'pipeline'
     - if: $CI_PIPELINE_SOURCE == 'parent_pipeline'