Update production deploy CI
GitLab deprecated 'only' and production CI shouldn't run in MRs from forks.
This isn't a security issue, it just prevents merging from forks' main
branch because it will run the production deploy script and fail because the fork lacks access to our CI secrets.