Refine triggers to avoid replicated runs on PRs

[farshidtz]

The workflow currently runs twice on PRs, on every commit from a branch:

This is because the trigger branch for push event isn't restricted to main.

This isn't an issue on PRs with a forked repo head, only on those from an internal branch.