Sonar workflow fails in forks

because it can't access our secrets, which makes sense.

→ Ignore this workflow in forks (see also https://github.com/orgs/community/discussions/9098)
→ Maybe use something else? Spotbugs for example could be an option