GitHub Actions: avoid double runs from on: [push, pull_request]

Using separate rules for GitHub actions events prevents redundant CI runs when both push and pull_request triggers fire, reducing costs, delays, and flaky failures.