ci: ensure api workflow works on PRs from forks

[gobengo]

Alternatives:

• Instead of merging this into main (which also incorporates @olizilla commit), you can use this pr to merge it into the cluster-v1 branch that @olizilla's PR uses

Motivation:

• api workflow isn't working isn't using valid syntax because I tried to include a secrets check in 'if' without testing (SORRY)
• Fixing the syntax alone will still have the deploy-dev job fail on forks that haven't defined a valid CF_API_TOKEN, so I hoped to have it be conditional.
• feat: api support for ipfs-cluster@1.0 #1789 (comment)
• ci: github actions dont run release-please unless push-to-main #1698 (review)

Inspiration

• https://gh.neting.ccmunity/t/conditionally-run-a-step-only-if-a-secret-is-defined/119132/3

Strategy:

• You can't if on secrets, but you can on env, so pass the secret as an env

Test:

• this run worked even though my fork doesn't have the secret: https://github.com/nftstorage/nft.storage/runs/5889040202?check_suite_focus=true

Open Questions

• Why are the tests failing (i forked off this morning's main) https://github.com/nftstorage/nft.storage/runs/5889100894?check_suite_focus=true
  • @olizilla 's commit fixed it. I think they started failing once in main due to the loose reference on ipfs-cluster 'latest'

[vasco-santos]

@gobengo let's merge this into Oli's PR (your other PR). Oli's PR is a breaking change that is part of tomorrow's maintenance in nft.storage to update production cluster