ci/rules: make every job exist as manual in fork pipelines

In forks, every job exists, but no job is automatically run.

Should help with the problem of users clicking on that tempting "play"
button GitLab offers and that has been causing a lot of issues with
wasted resources.

Downside is, users now have to use the `bin/ci/ci_run_n_monitor.sh`
script to be able to run a bunch of jobs at once.

Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/25252>

.gitlab-ci.yml

@@ -195,8 +195,16 @@ include:
 .rules-anchors:
   # Pre-merge pipeline
   - &is-pre-merge '$CI_PIPELINE_SOURCE == "merge_request_event"'
+  # Push to a branch on a fork
+  - &is-fork-push '$CI_PROJECT_NAMESPACE != "mesa" && $CI_PIPELINE_SOURCE == "push"'
 
 
+# Rules applied to every job in the pipeline
+.common-rules:
+  rules:
+    - if: *is-fork-push
+      when: manual
+
 .never-post-merge-rules:
   rules:
     - if: *is-post-merge
@@ -205,6 +213,7 @@ include:
 
 .container+build-rules:
   rules:
+    - !reference [.common-rules, rules]
     # Run when re-enabling a disabled farm, but not when disabling it
     - !reference [.disable-farm-mr-rules, rules]
     # Never run immediately after merging, as we just ran everything

.gitlab-ci/test-source-dep.yml

@@ -48,6 +48,7 @@
 # ---------------------------------------------------------------
 .core-rules:
   rules:
+    - !reference [.common-rules, rules]
     - !reference [.no_scheduled_pipelines-rules, rules]
     - changes: &core_file_list
         - .gitlab-ci.yml
@@ -73,6 +74,7 @@
 .core-manual-rules:
   extends: .no-auto-retry
   rules:
+    - !reference [.common-rules, rules]
     # We only want manual jobs to show up when it's not marge's pre-merge CI
     # run, otherwise she'll wait until her timeout.  The exception is
     # performance jobs, see below.

docs/gitlab-ci.yml

@@ -17,6 +17,7 @@ pages:
   extends: .docs-base
   stage: deploy
   rules:
+    - !reference [.common-rules, rules]
     - !reference [.no_scheduled_pipelines-rules, rules]
     - if: '$CI_PROJECT_NAMESPACE == "mesa" && $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH && $CI_COMMIT_BRANCH'
       changes: &docs-or-ci
@@ -36,6 +37,7 @@ test-docs:
   interruptible: true
   stage: deploy
   rules:
+    - !reference [.common-rules, rules]
     # pre-merge or merge pipeline
     - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
       changes: *docs-or-ci
@@ -52,6 +54,7 @@ linkcheck-docs:
   interruptible: true
   stage: deploy
   rules:
+    - !reference [.common-rules, rules]
     - !reference [.scheduled_pipeline-rules, rules]
   allow_failure: true
   script: