Only run container build/deploy on official project

This sets up the restrictions in a slightly different way, to ensure we don't try to run things in a forked master branch.