ci: build wheel only on origin, make sbom test more robust (#4126)

ci: build wheel only on origin, make sbom test more robust (#4126) #984