PRs from forks don't have access to repository secrets, so the action can't deploy in this situation.

Consider adding some docs to explain this