Only run test suite when secure vars are available

Runs a basic JSHint checks, but not the full test suite that depends on the secure vars. This will prevent failures on PR builds, but you won't have the full CI test suite.