gitlab-ci: Overhaul job run policy