Skip canary tests on protected branches (0.15.0)
Summary
- Add rules to canary jobs to skip when
$CI_COMMIT_REF_PROTECTED == "true" - Canaries now only run on non-protected branches (feature branches)
- Reduces warning noise on stable branches (master/main/lts/*)
Rationale
Canaries are meant to warn during development about potential downstream breakage. On protected branches, canary failures just create noise since:
- The code is already stable/released
- Failures indicate downstream repos need updating, not that this repo has issues
- No action is needed on the warnings