feat: Clarify GH Actions

.github/workflows/ci.yml

@@ -4,7 +4,6 @@ on:
   push:
     branches: [ main ]
   pull_request:
-    branches: [ main ]
 
 jobs:
   build-and-test:

.github/workflows/docker-pr.yml

@@ -0,0 +1,22 @@
+name: Validate Docker Build
+
+on:
+  pull_request:
+
+jobs:
+  validate-docker-build:
+    name: Build Docker Image (no push)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: deploy/docker/Dockerfile
+          push: false

.github/workflows/docker.yml → .github/workflows/docker-release.yml

@@ -1,34 +1,15 @@
-name: Build and Push Docker Image
+name: Publish Docker Image
 
 on:
-  pull_request:
-    branches: [ main ]
   release:
     # Publishing a release for an existing tag (via the GitHub UI) does not
     # emit a push event, so include this trigger to build the image when a
     # release goes live.
     types: [ published ]
 
 jobs:
-  docker-build-pr:
-    if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Build image (no push)
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: deploy/docker/Dockerfile
-          push: false
-
-  docker:
-    if: github.event_name == 'release'
+  publish:
+    name: Publish Docker Image to GHCR
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -55,7 +36,7 @@ jobs:
           tags: |
             type=ref,event=tag
 
-      - name: Build and push
+      - name: Build and push image
         uses: docker/build-push-action@v6
         with:
           context: .