do not dispatch validation from forks, or clarify the missing token error

PRs from forks cannot trigger clas12-validation, since they do not have access to secrets. The error message is hard to understand and will lead to confusion. Either:

• do not even run the validation workflow for forks
• check if fork, and fail with a clearer error message before attempting dispatch