The CI job token has limited access to the API; cf.
https://docs.gitlab.com/ee/ci/jobs/ci_job_token.html

Otherwise, you cannot disable all CI jobs and enable just one.

Also, remove run/skip variables from MM and AST jobs. These do
not make sense there.