fix update changelog workflow

[epassaro]

Description

• Disable action for forks.
• Use TARDIS bot token to push.

Motivation and Context

@KevinCawley noticed the workflow was running on forks. Ironically, the workflow fails on tardis main repo because our master branch is write-protected (requires at least one approval before merging). The TARDIS bot has enough rights to do it.

How Has This Been Tested?

• Testing pipeline
• Reference Data Comparison following these instructions
• Other (please describe)

It's not possible to test these changes before merging 🤞 .

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• None of the above (please describe)

Checklist:

• My code follows the code style of this project
• My change requires a change to the documentation
• I have updated the documentation accordingly
• I have built the documentation on my fork following these instructions
• I have assigned and requested two reviewers for this pull request

[codecov]

Codecov Report

Merging #1432 (4e97130) into master (4c346f0) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #1432   +/-   ##
=======================================
  Coverage   71.16%   71.16%           
=======================================
  Files          67       67           
  Lines        5521     5521           
=======================================
  Hits         3929     3929           
  Misses       1592     1592           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4c346f0...4e97130. Read the comment docs.