When looking at pipeline [1] we have realized that the newly introduced
bundle build and publishing jobs pose a problem for unrelated updates
of the tree, as depending on which exact files are modified by the
incoming pull request, the build jobs may not spawn, causing a
dependency error on the bundle and publishing jobs.

When initially introduced, it was overlooked that the jobs both have a
dependency on one another (build->bundle->publish) *and* come with a
distinct set of rules that govern if a specific job is created in a
given pipeline.

To resolve the problem move the rules to a new dot-job, called
.workspace-rules, and inject the dependency on .workspace-rules to all
the jobs that share the dependency chain.

[1] https://gitlab.eclipse.org/eclipse/oniro-core/oniro/-/pipelines/4285



Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>