CI: don't make tag pipeline jobs manual

Yury Matveevrequested to merge
fix-manual-rule-on-tags into develop

On tag pipelines CI_COMMIT_BRANCH is undefined, so the .manual-on-branch-push rule matched and made linux:build-sdist, run-prek, test-docs and linux:test-source manual. As a result generate-pypi-attestations was skipped in the v10.3.2rc1 pipeline. Require CI_COMMIT_BRANCH to be set so the rule only applies to branch pushes.

🤖 Generated with Claude Code

Merge request reports