Linter for no workflows on fork (pytorch#138849)

MInor, adds a linter that ensures that all jobs run on pull_request, schedule, push etc have a `if: github.repository_owner == 'pytorch'` or are dependent on a job that has that check

There is also a setting in Github repos that can disable all workflows for that repo

A lot of these are unnecessary because many jobs use reusable workflows that have that check.  However, this is a one time change so I'm not that bothered

Unfortunately I can't put this at the workflow level, which would make this better

Lots of weird string parsing

Pull Request resolved: pytorch#138849
Approved by: https://github.com/malfet

Author: clee2000

.github/templates/linux_binary_build_workflow.yml.j2

@@ -53,6 +53,7 @@ env:
 
 jobs:
   get-label-type:
+    if: github.repository_owner == 'pytorch'
     name: get-label-type
     uses: pytorch/pytorch/.github/workflows/_runner-determinator.yml@main
     with:

.github/templates/windows_binary_build_workflow.yml.j2

@@ -54,6 +54,7 @@ env:
 
 jobs:
   get-label-type:
+    if: github.repository_owner == 'pytorch'
     name: get-label-type
     uses: pytorch/pytorch/.github/workflows/_runner-determinator.yml@main
     with:

.github/workflows/auto_request_review.yml

@@ -6,7 +6,7 @@ on:
 jobs:
   auto-request-review:
     # Don't run on forked repos
-    if: ${{ !github.event.pull_request.head.repo.fork }}
+    if: ${{ !github.event.pull_request.head.repo.fork && github.repository_owner == 'pytorch' }}
     permissions:
       contents: read
       pull-requests: write

.github/workflows/build-android-binaries.yml

@@ -26,6 +26,7 @@ concurrency:
 
 jobs:
   android-build-test:
+    if: github.repository_owner == 'pytorch'
     name: android-build-test
     uses: ./.github/workflows/_run_android_tests.yml
     with:

.github/workflows/build-conda-images.yml

@@ -31,6 +31,7 @@ concurrency:
 
 jobs:
   build-docker:
+    if: github.repository_owner == 'pytorch'
     environment: ${{ (github.ref == 'refs/heads/main' || startsWith(github.event.ref, 'refs/tags/v')) && 'docker-build' || '' }}
     runs-on: linux.9xlarge.ephemeral
     strategy:

.github/workflows/build-ios-binaries.yml

@@ -38,6 +38,7 @@ concurrency:
 jobs:
   # TODO: Figure out how to migrate this job to M1 runner
   ios-build-test:
+    if: github.repository_owner == 'pytorch'
     name: ios-build-test
     uses: ./.github/workflows/_ios-build-test.yml
     with:

.github/workflows/build-libtorch-images.yml

@@ -30,6 +30,7 @@ concurrency:
 
 jobs:
   get-label-type:
+    if: github.repository_owner == 'pytorch'
     name: get-label-type
     uses: pytorch/pytorch/.github/workflows/_runner-determinator.yml@main
     with:

.github/workflows/build-manywheel-images.yml

@@ -34,6 +34,7 @@ concurrency:
 
 jobs:
   get-label-type:
+    if: github.repository_owner == 'pytorch'
     name: get-label-type
     uses: pytorch/pytorch/.github/workflows/_runner-determinator.yml@main
     with:

.github/workflows/build-triton-wheel.yml

@@ -28,6 +28,7 @@ concurrency:
 
 jobs:
   get-label-type:
+    if: github.repository_owner == 'pytorch'
     name: get-label-type
     uses: pytorch/pytorch/.github/workflows/_runner-determinator.yml@main
     with:

.github/workflows/check_mergeability_ghstack.yml

@@ -7,6 +7,7 @@ on:
 
 jobs:
   ghstack-mergeability-check:
+    if: github.repository_owner == 'pytorch'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4