.gitlab-ci.yml: run the deploy job only on the main repo, restrict forks
now that we have CI deployments, any CI runner that is a salt-minion
could call the deploy command. This includes also the case that someone
forks the repository and pushes to their production branch. This change
restricts deployments from forks