Only run verify build metadata on upstream PRs (#22633)

.github/workflows/ci.yml

@@ -92,7 +92,7 @@ jobs:
 
   test_run_docker_action:
     runs-on: ubuntu-latest
-    needs: build
+    needs: [build, context]
 
     steps:
       - uses: actions/checkout@v4
@@ -127,8 +127,7 @@ jobs:
 
       - name: Verify Build Metadata
         uses: ./.github/actions/run-docker
-        env:
-          DOCKER_COMMIT: should_not_be_this
+        if: needs.context.outputs.is_fork == 'false'
         with:
           digest: ${{ needs.build.outputs.digest }}
           version: ${{ needs.build.outputs.version }}