Antalya 25.8 Workflow for external contributors

[strtgbb]

Changelog category (leave one):

• CI Fix or Improvement (changelog entry is not required)

A new workflow that does not rely on secrets.

TODO

• Create a workflow that uses no secrets, and is therefore safe to run for external contributors
• Use Github artifacts instead of S3 artifacts
• Support test exclusion (optional)
• Working builds
• Working stateless tests
• Working integration tests
• Working regression tests (skip for now)
• Remove jobs that assume S3 access
• Ensure all tests that rely on external storage are skipped
• Skip workflow for internal contributors
• Double check that Github token is read only (best tested in a new PR)

CI/CD Options

Exclude tests:

• Fast test
• Integration Tests
• Stateless tests
• Stateful tests
• Performance tests
• All with ASAN
• All with TSAN
• All with MSAN
• All with UBSAN
• All with Coverage
• All with Aarch64
• All Regression
• Disable CI Cache

Regression jobs to run:

• Fast suites (mostly <1h)
• Aggregate Functions (2h)
• Alter (1.5h)
• Benchmark (30m)
• ClickHouse Keeper (1h)
• Iceberg (2h)
• LDAP (1h)
• Parquet (1.5h)
• RBAC (1.5h)
• SSL Server (1h)
• S3 (2h)
• Tiered Storage (2h)

[github-actions]

Workflow [PR], commit [80ce7a5]

[strtgbb]

Community Workflow is skipped for internal contributors: https://github.com/Altinity/ClickHouse/actions/runs/20787703548

Community Workflow runs for external contributors: https://github.com/Altinity/ClickHouse/actions/runs/20788159295