Move CI onto static runners and fix the internal-repo gate (#7619)