v4.1.3: WATCH_CVE guard on promote_job_rules

Continuation of v4.1.2. promote's needs caused empty-jobs pipeline
failure on cve-watch schedules. Gate fixed.