fix(ci): robustly skip app token generation for fork PRs

.github/workflows/gemini-scheduled-stale-pr-closer.yml

@@ -23,10 +23,7 @@ jobs:
     steps:
       - name: 'Generate GitHub App Token'
         id: 'generate_token'
-        env:
-          APP_ID: '${{ secrets.APP_ID }}'
-        if: |-
-          ${{ env.APP_ID != '' }}
+        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
         uses: 'actions/create-github-app-token@v2'
         with:
           app-id: '${{ secrets.APP_ID }}'

.github/workflows/test-secrets-if.yml

@@ -1,13 +0,0 @@
-name: Test Secrets If
-on:
-  workflow_dispatch:
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check Secret
-        if: ${{ secrets.APP_ID != '' }}
-        run: echo "Secret is not empty"
-      - name: Check Secret 2
-        if: secrets.APP_ID != ''
-        run: echo "Secret is not empty 2"