Don't use trusted runners for regular CI builds
See discussion at https://wikimedia.slack.com/archives/C05H0JYT85V/p1694631058462649
TL;DR:
Suddenly CI builds stopped working, because usage of trusted
runners got tightened up. After a discussion with @dancy, we figured that, for regular CI builds that run pytest
and our linting process, we do not need trusted
runners.
This MR removes this tag for most of our CI runs, except for when we truly need trusted
runners: for publish-debian-package
CI step.
CC @aqu