avoid code-scan workflow for forks

.github/workflows/codeql.yml

@@ -31,6 +31,7 @@ jobs:
     #   - https://gh.io/using-larger-runners (GitHub.com only)
     # Consider using larger runners or machines with greater resources for possible analysis time improvements.
     runs-on: ubuntu-latest
+    if: github.repository_owner == 'cap-js-community' # don't scan on forks
     permissions:
       # required for all workflows
       security-events: write