Hide potentially confusing `on-merge` jobs from users

Currently in a MR the on-merge jobs will be disabled and can be actively pressed. This might confuse piquets trying to generate TCKs.

We can make this only turn up when adding a label -> then development MRs can still verify these things.