[#1392] set default gitlab ci rules at the end

Closes #1392 (closed) a second time.

Moves default at the end to try to satisfy this documented behavior:

Rules are evaluated in order until the first match. When a match is found, the job is either included or excluded from the pipeline, depending on the configuration.

Tested here: andrei/stork!7 (merged). You can see the jobs running on the pipeline after merge.