ci: don't push docker images for every commit as it floods the registry