When someone external to the team creates a PR the job fails on CI (at least when server-side apps are being cleaned - because no secrets will be set on jobs triggered by external contributors). We could probably migrate that to a nightly (trusted) job to clean up server-side apps, but we need to investigate what other steps in the integration tests fail because of the missing secrets.