ci: skip jobs requiring secrets when running from forks

Add conditional checks to skip CI jobs that require ANTHROPIC_API_KEY
when PRs come from forks, since fork PRs don't have access to repo
secrets. This prevents unnecessary CI failures for external contributors.

Affected jobs:
- test-e2e
- test-e2e-docker
- test-examples
- claude-review

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: ashwin-ant

.github/workflows/claude-code-review.yml

@@ -12,12 +12,8 @@ on:
 
 jobs:
   claude-review:
-    # Optional: Filter by PR author
-    # if: |
-    # github.event.pull_request.user.login == 'external-contributor' ||
-    # github.event.pull_request.user.login == 'new-developer' ||
-    # github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
-
+    # Skip on forks since they don't have access to secrets
+    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/test.yml

@@ -38,6 +38,8 @@ jobs:
           fail_ci_if_error: false
 
   test-e2e:
+    # Skip on forks since they don't have access to secrets
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ${{ matrix.os }}
     needs: test # Run after unit tests pass
     strategy:
@@ -82,6 +84,8 @@ jobs:
           python -m pytest e2e-tests/ -v -m e2e
 
   test-e2e-docker:
+    # Skip on forks since they don't have access to secrets
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     needs: test # Run after unit tests pass
     # Run e2e tests in Docker to catch container-specific issues like #406
@@ -100,6 +104,8 @@ jobs:
             claude-sdk-test python -m pytest e2e-tests/ -v -m e2e
 
   test-examples:
+    # Skip on forks since they don't have access to secrets
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     needs: test-e2e # Run after e2e tests
     strategy: