Draft: ci: add .common-rules that apply to *every* job in the pipeline

And the first common rule? Making sure in fork pipeline, every job exists, but no job is automatically run.