ci: confine docker and macOS jobs to main repository
Some of our CI jobs use project-specific GitLab runners (e.g. requiring
the dind
tag). The jobs then fail when someone forks the repository
and opens a merge request. This commit confines those jobs to the
knot/knot-resolver
repository.