dev: prevent publish just task from being run locally in a dev environment

[reubenmiller]

Add a private "ci-only" task which is added as a dependency to the publish task to disallow users to call it locally in a dev environment.

In the past, the just publish was accidentally called locally but cancelled, so it resulted in only some of the architecturs from the multi-arch container image being published, which essentially broke the images for some people.

[github-actions]

Robot Results

✅ Passed	❌ Failed	⏭️ Skipped	Total	Pass %	⏱️ Duration
21	0	1	21	100	9m15.873918s

Passed Tests

Name	⏱️ Duration	Suite
Supports Cumulocity Basic Auth Credentials	22.299 s	C8Y-Basic-Auth
Ignore Containers Marked With A Specific Label	28.683 s	Container
Grace period to allow container to startup	5.025 s	Operations
Service is up	0.184 s	Operations
Get Logfile Request	4.671 s	Operations
Get Configuration File	4.983 s	Operations
Set Configuration File	2.659 s	Operations
Execute Shell Command	2.497 s	Operations
Install application using docker compose	33.090 s	Operations
Get Container Logs	4.656 s	Operations
Get Container Logs without explicit container name	4.659 s	Operations
Get Container Logs For Non-existent container	2.507 s	Operations
Update From Legacy Versions	144.840 s	Self-Update-Compat
Trigger self update via local command	25.278 s	Self-Update
Self update should only update if there is a new image	22.080 s	Self-Update
Self update using software update operation	105.109 s	Self-Update
Rollback when trying to install a non-tedge based image	26.375 s	Self-Update
Self update using software update operation using Container type	112.771 s	Self-Update
Cloud Connection is Online	0.200 s	Telemetry
Service status	0.310 s	Telemetry
Sends measurements	2.969 s	Telemetry