fix: prevent fork PRs from triggering release pipeline

[willfarrell]

Summary

• Add same-repo check to release pipeline: merged PRs from forks no longer trigger publishing (prevents a crafted version bump from a fork from pushing a package)

Test plan

• Verify release still triggers on merged PR from willfarrell/1auth with package.json changes
• Verify release does NOT trigger on merged fork PR