fix: make gates transparent about fork PR skip behavior

- Remove `if: always()` from integration-gate, coverage-gate, codecov-gate, pipeline-gate
- Gates now naturally skip when their upstream dependencies are skipped (fork PR behavior)
- Prevents confusing "complete" status when nothing actually ran
- Fork PRs will show "skipped" in UI instead of obscuring behavior behind gate success
- Aligns with GitHub Actions standard job dependency semantics

.github/workflows/ci-pipeline.yml

@@ -410,7 +410,6 @@ jobs:
       - integration-crowdsec
       - integration-waf
       - integration-ratelimit
-    if: always()
     steps:
       - name: Evaluate integration results
         run: |
@@ -529,7 +528,6 @@ jobs:
       - coverage-backend
       - coverage-frontend
       - e2e
-    if: always()
     steps:
       - name: Evaluate coverage results
         run: |
@@ -609,7 +607,6 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - codecov-upload
-    if: always()
     steps:
       - name: Evaluate Codecov upload results
         run: |
@@ -751,7 +748,6 @@ jobs:
       - security-codeql
       - security-trivy
       - security-supply-chain
-    if: always()
     steps:
       - name: Evaluate pipeline results
         run: |