Run checks on `pull_request` only

[roblafeve]

I think we should explore only running CI workflow actions on pull_request actions instead of ever running them on push. I'm honestly not sure what this will look like, so it's worth testing out.