app-builder fails when the PR is created by an external contributor

[onedr0p]

Noticed this just now and it was due to my changes that brought in the container size diff.

During the build application job:

Error: buildx bake failed with: ERROR: failed to solve: failed to push ghcr.io/home-operations/cni-plugins: denied: installation not allowed to Write organization package

https://github.com/home-operations/containers/actions/runs/17666353830?pr=790

[onedr0p]

I couple options I considered:

1. Add a bunch of logic to app-builder to determine if PR came from this repo
2. Create workflows app-builder-external.yaml and pull-request-external.yaml with the right logic to test

I lean towards number 2 because number one would have spaghetti logic.

[sticky-gecko]

This issue has been marked as stale due to 60 days of inactivity. Please remove the stale label or leave a comment to keep it open.
If no action is taken, it will be automatically closed in 7 days.