Don't run upgrade-patch jobs on forks (#12206)

With the current github-workflow setup, workflows are triggered on every
forked repository (which is quite wasteful).

Add a condition to only run on the main repository.