fix(ci): prevent baseline workflow self-trigger loop

Created by: gufranky

Skip the funct CI job for [SKIP_CI] commits and use BOT_PAT for checkout so baseline updates can push to protected main.