Allow easier CI runs for PRs from forks

[aguschin]

Currently, we need to manually approve each commit in PR from fork to be run in CI. This adds a lag into getting valuable feedback for external contributors.

Suggestion: split tests and CI into two parts: one that don't require secrets and the other that does. Then run the first each time, but still require manual approve to run the second part.