separate pipelines

.gitlab-ci.yml

-include:
-  - local: '.gitlab-ci-ingest.yml'
-
 workflow:
   rules:
     - if: '$CI_PIPELINE_SOURCE == "web"'
-      when: always      # Allow ONLY manual runs from Run Pipeline button
-    - when: never       # Block all automatic runs (push, MR, schedule, API)
+      when: always
+    - when: never
 
 stages:
   - lint