Workflows were running twice for feature branches: once on push and once
on pull_request. Now push only triggers for main branch, while feature
branches get CI via the pull_request trigger when a PR exists.
This prevents duplicate workflow runs and the confusion of having
one run pass while another fails for the same commit.