All review jobs should share the same only & except
What does this MR do?
review-build-cng is a dependency for review-deploy therefore they should share the same only and except. This was brought up in https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/24538#note_133783746