ci: only run jobs after merging or in merge requests
This makes MR pipelines run in the merge request, instead of running in the fork (which might not have the CI enabled)
This makes MR pipelines run in the merge request, instead of running in the fork (which might not have the CI enabled)