github actions: skip treewide PRs

[zowoq]

Description of changes

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 23.05 Release Notes (or backporting 22.11 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
  • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
• Fits CONTRIBUTING.md.

[zowoq]

Forgot that it needs to be in the base branch for it to work so testing it on this PR won't work.

I'll go through the other PRs and change them to skip treewide after this is merged.

https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+%5Bskip+editorconfig%5D

cc @0x4A6F

[zowoq]

@infinisil As it needs to be read from the base branch you'll need to rebase on top of master after this is merged.

[risicle]

I think this is fine from a security POV because it's not like our workflows make hard restrictions anyway and the flag is visible and transparent.

[infinisil]

Context for this: #211832 which made all CI runs run into API rate limits