FW-167 Only run skynet on releases

[wesleybalvanz-wf]

Motivation

Currently the skynet config is running on pull requests as well as releases which is causing us to hit the github api rate limit, we don't really need to have the skynet config running on pull requests because it's just needed for release pipelines.

Changes

Add a run config to skynet that limits running to just releases and if there are changes to the skynet.yaml

Release Notes

Run skynet only on releases

Review

See CONTRIBUTING.md for more details on review types (+1 / QA +1 / +10) and code review process.

Please review:

QA Checklist

• [ ] Tests were updated and provide good coverage of the changeset and other affected code
• [ ] Manual testing was performed if needed
  • [ ] Steps from PR author:
  • [ ] Anything falling under manual testing criteria outlined in CONTRIBUTING.md

Merge Checklist

While we perform many automated checks before auto-merging, some manual checks are needed:

• [ ] A Client Platform member has reviewed these changes
• [ ] There are no unaddressed comments - this check can be automated if reviewers use the "Request Changes" feature
• [ ] For release PRs - Version metadata in Rosie comment is correct

[aviary3-wk]

Security Insights

No security relevant content was detected by automated scans.

Action Items

• Review PR for security impact; comment "security review required" if needed or unsure

• Verify aviary.yaml coverage of security relevant code

  Questions or Comments? Reach out on Slack: #support-infosec.

[autobot-wk]

Skynet test results failed initially for this build but were approved by evan.weible https://wf-skynet-hrd.appspot.com/apps/test/smithy/3715176/2 Approval message: Rate limit

[charliekump-wf]

@Workiva/release-management-p ready for merge.

[evanweible-wf]

@Workiva/release-management-p