build(ci): run sonar cloud only if sonar token secret is defined